Memory corruption

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10068 Zephyr Bluetooth DLE duplicate requests vulnerability

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10068

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10070

In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10070

No technical details are publicly available in the provided documents for CVE-2020-10070. Monitor for updates.

CVE-2020-10061

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10062 Packet length decoding error in MQTT

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10071 Insufficient publish message length validation in MQTT

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10061

CVE-2020-10061 describes a vulnerability in the Zephyr Bluetooth implementation where improper handling of the full-buffer case can lead to memory corruption. Affected products are Zephyr RTOS with Bluetooth, specifically versions 2.2.0 and later, and 1.14.0 and later. Reported by multiple source...

CVE-2020-10068

The CVE-2020-10068 entry describes a denial-of-service vulnerability in the Zephyr project Bluetooth subsystem caused by an input validation error. Affected software is Zephyr RTOS versions 2.2.0 and later, and 1.14.0 and later. The vulnerability stems from handling of certain duplicate/back-to-b...

CVE-2020-10071

Zephyr CVE-2020-10071 affects Zephyr RTOS 2.2.0 and later. The MQTT parsing code fails to adequately validate the length field on publish messages, enabling a buffer overflow that could lead to remote code execution. Multiple sources describe this as a buffer-overflow vulnerability due to insuffi...

CVE-2020-10061 Error handling invalid packet sequence

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10062

The vulnerability CVE-2020-10062 affects Zephyr RTOS MQTT packet length decoder (off-by-one) in Zephyr 2.2.0 and later. Root cause: off-by-one in the decoder leading to memory corruption and possible remote code execution. Impact: memory corruption with potential code execution. Remediation: fixe...

CVE-2020-10063

CVE-2020-10063 concerns Zephyr RTOS. Multiple connected sources confirm a vulnerability in Zephyr where an input validation error in CoAP packet handling can allow a remote attacker to cause a denial of service. Affected product/version: Zephyr (zephyrproject-rtos) version 2.2.0 and later. The CN...

CVE-2020-10070 MQTT buffer overflow on receive buffer

In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063 Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063: Integer Overflow or Wraparound

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10068: Improper Input Validation

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

PT-2020-11891

Name of the Vulnerable Software and Affected Versions zephyrproject-rtos zephyr versions 1.14.0 through 2.2.0 and later versions. Description The issue is related to improper handling of the full-buffer case in the Zephyr Bluetooth implementation, which can result in memory corruption...