Lucene search
+L

56 matches found

CNNVD
CNNVD
added 2024/11/26 12:0 a.m.6 views

Apache NimBLE 安全漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. A security vulnerability exists in Apache NimBLE 1.7.0 and prior versions, which...

5CVSS6.8AI score0.00597EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.6 views

Apache NimBLE 安全漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. An out-of-bounds read vulnerability exists in Apache NimBLE, which can be...

7.5CVSS6.8AI score0.01155EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.6 views

PT-2024-34712 · Apache · Apache Nimble

Name of the Vulnerable Software and Affected Versions: Apache NimBLE versions through 1.7.0 Description: The issue is an Out-of-bounds Read vulnerability in Apache NimBLE. It is caused by missing proper validation of HCI Number Of Completed Packets, which could lead to out-of-bound access when...

7.5CVSS7.2AI score0.01155EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.12 views

PT-2024-32496 · Apache · Apache Nimble

Name of the Vulnerable Software and Affected Versions: Apache NimBLE versions through 1.7.0 Description: The issue is an Out-of-bounds Read vulnerability in Apache NimBLE. It is caused by missing proper validation of the HCI advertising report, which could lead to out-of-bound access when parsing...

5CVSS4.9AI score0.00664EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.7 views

PT-2024-32494 · Apache · Apache Nimble

Name of the Vulnerable Software and Affected Versions: Apache NimBLE versions through 1.7.0 Description: The issue is related to improper validation of array indices in Apache NimBLE, which could result in out-of-bound memory corruption and crash due to lack of input validation for HCI events fro...

5CVSS6.6AI score0.00597EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.6 views

Apache NimBLE 安全漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. An out-of-bounds read vulnerability exists in Apache NimBLE, which can be...

5CVSS6.8AI score0.00664EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.7 views

PT-2024-32493 · Apache · Apache Nimble

Name of the Vulnerable Software and Affected Versions: Apache NimBLE versions through 1.7.0 Description: A Buffer Copy without Checking Size of Input, also known as a 'Classic Buffer Overflow', vulnerability in Apache NimBLE could result in memory corruption when a specially crafted MESH message ...

6.3CVSS6.4AI score0.00692EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.8 views

Apache NimBLE 安全漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. Apache NimBLE suffers from a buffer overflow vulnerability that can be exploited...

6.3CVSS7.3AI score0.00692EPSS
Exploits0References2
CNVD
CNVD
added 2024/04/09 12:0 a.m.7 views

Apache NimBLE Denial of Service Vulnerability

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation in the U.S. It completely replaces the proprietary SoftDevice on the Nordic chipset.It is part of the Apache Mynewt project. A denial-of-service vulnerability exists in Apache NimBLE version 1.6.0 a...

7.5CVSS6.7AI score0.01458EPSS
Exploits0References1
NVD
NVD
added 2024/04/06 12:15 p.m.20 views

CVE-2024-24746

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device. This issue affects Apache NimBLE: through 1.6.0. Users are recommended to upgrade...

7.5CVSS6.5AI score0.01458EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/04/06 11:56 a.m.33 views

CVE-2024-24746 Apache NimBLE: Denial of service in NimBLE Bluetooth stack

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device. This issue affects Apache NimBLE: through 1.6.0. Users are recommended to upgrade...

6.7AI score0.01458EPSS
Exploits0References3
CVE
CVE
added 2024/04/06 11:56 a.m.85 views

CVE-2024-24746

CVE-2024-24746: Apache NimBLE's GATT server is vulnerable to a Denial of Service via a specially crafted GATT operation that causes an infinite loop. Affected software: NimBLE up to version 1.6.0; impact is denial of service to the Bluetooth stack/device. Remediation: upgrade to NimBLE 1.7.0 (fix).

7.5CVSS7.5AI score0.01458EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/06 11:56 a.m.9 views

CVE-2024-24746 Apache NimBLE: Denial of service in NimBLE Bluetooth stack

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device. This issue affects Apache NimBLE: through 1.6.0. Users are recommended to upgrade...

6.8AI score0.01458EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2024/04/06 11:56 a.m.5 views

CVE-2024-24746

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device. This issue affects Apache NimBLE: through 1.6.0. Users are recommended to upgrade...

7.5CVSS7.2AI score0.01458EPSS
Exploits0References3
OSV
OSV
added 2024/04/06 11:56 a.m.12 views

CVE-2024-24746 Apache NimBLE: Denial of service in NimBLE Bluetooth stack

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device. This issue affects Apache NimBLE: through 1.6.0. Users are recommended to upgrade...

7.5CVSS5.9AI score0.01458EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.4 views

PT-2024-20526 · Apache · Apache Nimble

Name of the Vulnerable Software and Affected Versions: Apache NimBLE versions through 1.6.0 Description: A specially crafted GATT operation can cause an infinite loop in the GATT server, leading to a denial of service in the Bluetooth stack or device. Recommendations: For Apache NimBLE versions...

7.5CVSS7.2AI score0.01458EPSS
Exploits0References10
Rows per page
Query Builder