Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zephyrproject'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-3329 6.5 Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack 2023-03-07 14:47:00
CVE-2021-3322 3.3 Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r 2023-02-06 14:30:00
CVE-2023-0397 6.5 A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete. 2023-01-25 20:52:00
CVE-2021-3966 8.8 usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem. 2023-01-18 20:03:00
CVE-2022-2741 7.5 The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on 2022-11-01 16:14:00
CVE-2020-10065 5.8 Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHS 2022-10-29 02:48:00
CVE-2021-3319 7.5 DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github 2022-10-25 15:09:00
CVE-2022-1841 5.3 In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero. 2022-09-07 16:54:00
CVE-2022-1042 8.8 In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. 2022-08-03 15:43:00
CVE-2022-1041 8.8 In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. 2022-08-02 18:44:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/18
Zapisa po stranici: