2203 matches found
CVE-2020-10065 Missing Size Checks in Bluetooth HCI over SPI
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-10066
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions = v1.14.2, = v2.2.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr...
CVE-2020-10066
CVE-2020-10066 concerns a NULL pointer dereference in the Bluetooth HCI core of Zephyr RTOS. Affected products are Zephyr versions >= v1.14.2 and >= v2.2.0; the underlying cause is an error-handling defect (CWE-476) in the Bluetooth HCI subsystem. The Connected documents do not provide a co...
CVE-2020-10066 Incorrect Error Handling in Bluetooth HCI core
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions = v1.14.2, = v2.2.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr...
CVE-2020-10065
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-10064
The CVE-2020-10064 issue affects Zephyr RTOS, specifically the ieee802154 processing path. The root cause is improper input frame validation, leading to stack-based (CWE-121) and heap-based (CWE-122) buffer overflows in Zephyr versions >= v1.14.2 and >= v2.2.0. This vulnerability is documen...
CVE-2020-10064
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
CVE-2020-13602: Improper Input Validation
Remote Denial of Service in LwM2M dowriteoptlv. Zephyr versions = 1.14.2, = 2.2.0 contain Improper Input Validation CWE-20, Loop with Unreachable Exit Condition 'Infinite Loop' CWE-835. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh...
CVE-2020-10066: NULL Pointer Dereference
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions = v1.14.2, = v2.2.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr...
PT-2021-9141
Name of the Vulnerable Software and Affected Versions zephyr versions = v1.14.2, = v2.2.0 Description The issue is related to improper handling of insufficient permissions or privileges. This can potentially lead to security issues due to the lack of proper access control. Recommendations For...
PT-2021-9662
Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later Zephyr versions 2.2.0 and later Description The issue is related to a Remote Denial of Service in LwM2M do write op tlv, caused by Improper Input Validation and an Infinite Loop. Recommendations For Zephyr...
CVE-2021-3454
Truncated L2CAP K-frame causes assertion failure. Zephyr versions = 2.4.0, = v.2.50 contain Improper Handling of Length Parameter Inconsistency CWE-130, Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3...
PT-2021-9138 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr versions = v1.14.2, = v2.2.0 Description: The issue concerns Missing Size Checks in Bluetooth HCI over SPI, which involves Improper Handling of Length Parameter Inconsistency. Recommendations: For Zephyr versions = v1.14.2, = v2.2.0, a...
PT-2021-9661
Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later, 2.3.0 and later Description The issue concerns a possible read out of bounds in dns read, which is classified as an Out-of-bounds Read. Recommendations For Zephyr versions 1.14.2 and later, 2.3.0 and later, at...
PT-2021-20076
Name of the Vulnerable Software and Affected Versions Zephyr versions = v2.4.0 Description The issue is related to Type Confusion in 802154 ACK Frames Handling, which contains a NULL Pointer Dereference. Recommendations For Zephyr versions = v2.4.0, at the moment, there is no information about a...
CVE-2020-13600: Heap-based Buffer Overflow
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
CVE-2021-3320: NULL Pointer Dereference
Type Confusion in 802154 ACK Frames Handling. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7...
CVE-2020-13599: Incorrect Default Permissions
Security problem with settings and littlefs. Zephyr versions = 1.14.2, = 2.3.0 contain Incorrect Default Permissions CWE-276. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q...
CVE-2020-13603: Integer Overflow or Wraparound
Integer Overflow in memory allocating functions. Zephyr versions = 1.14.2, = 2.4.0 contain Integer Overflow or Wraparound CWE-190. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45...