Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 1.8%
probabilidade de exploração
1.8%top 24% das CVEs
exploração observada
nãonenhuma fonte reporta
A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
zephyrproject-rtos · zephyrReferências
https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10063https://github.com/zephyrproject-rtos/zephyr/pull/24435https://github.com/zephyrproject-rtos/zephyr/pull/24530https://github.com/zephyrproject-rtos/zephyr/pull/24531https://github.com/zephyrproject-rtos/zephyr/pull/24535https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-55