CVE-2020-10022

A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later...

CVE-2020-10022 UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array

A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later...

PT-2020-11890

Name of the Vulnerable Software and Affected Versions zephyrproject-rtos zephyr versions 2.1.0 through 2.2.0 and later versions. Description The issue occurs after JSON parsing is complete in updatehub probe, where accessing objects1 from the output structure can lead to referencing uninitialized...

PT-2020-11889

Name of the Vulnerable Software and Affected Versions zephyr version 2.1.0 and later versions Description The issue concerns the UpdateHub module, which disables DTLS peer checking. This allows for a man-in-the-middle attack. However, firmware images require valid signatures, mitigating the issue...

PT-2020-11870

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.0 through 2.1.0 and later versions. Description An attacker with code execution within a user thread can elevate privileges to that of the kernel. Recommendations For zephyr versions 1.14.0 through 2.1.0 and later versions...

PT-2020-11888

Name of the Vulnerable Software and Affected Versions zephyr version 2.1.0 and later versions Description The issue is related to insufficient argument validation in multiple syscalls within the Kscan subsystem. This could potentially allow code executing in userspace to gain elevated privileges...

CVE-2020-10028: Improper Input Validation

Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions...

PT-2020-11894

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.1 through 2.1.0 and later versions. Description A malicious userspace application can cause an integer overflow, bypassing security checks performed by system call handlers. The impact can range from denial of service to...

PT-2020-11867

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.0 through 2.1.0 and later versions. Description The issue is related to the arm platform-specific code in zephyr, which uses a signed integer comparison when validating system call numbers. This allows an attacker with cod...

PT-2020-11866

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.0 through 2.1.0 and later versions, but for clarity, this can be simplified to: zephyr versions 1.14.0 and later versions Description The issue is related to a buffer overflow in the shell subsystem. This can lead to memor...

PT-2020-11862

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.1 through 2.1.0 and later versions. Description The issue is related to a potential buffer overflow in USB DFU where the requested length is not checked against the buffer size. This could be exploited by a malicious USB...

CVE-2021-3319

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476, Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see...

CloudBees Jenkins Zephyr for JIRA Test Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr for JIRA Test Management Plugin is used...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2145

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...

CVE-2020-2145

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...

Design/Logic Flaw

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...

Design/Logic Flaw

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...