exploitDog

CVE-2018-1000800

Опубликовано: 06 сент. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

Ссылки

https://github.com/zephyrproject-rtos/zephyr/issues/7638
Exploit
Third Party Advisory
https://github.com/zephyrproject-rtos/zephyr/issues/7638
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:zephyrproject:zephyr:1.12.0:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00372

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-m6rj-hx92-c739

CVSS3: 9.8

github

больше 3 лет назад

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

EPSS

Процентиль: 58%

0.00372

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-476