CVE-2020-10028

Опубликовано: 11 мая 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.

Ссылки

https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10028
https://github.com/zephyrproject-rtos/zephyr/pull/23308
Patch
Third Party Advisory
https://github.com/zephyrproject-rtos/zephyr/pull/23733
Patch
Third Party Advisory
https://github.com/zephyrproject-rtos/zephyr/pull/23737
Patch
Third Party Advisory
https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-32
Third Party Advisory
https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10028
https://github.com/zephyrproject-rtos/zephyr/pull/23308
Patch
Third Party Advisory
https://github.com/zephyrproject-rtos/zephyr/pull/23733
Patch
Third Party Advisory
https://github.com/zephyrproject-rtos/zephyr/pull/23737
Patch
Third Party Advisory
https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-32
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:zephyrproject:zephyr:1.14.0:*:*:*:*:*:*:*

cpe:2.3:o:zephyrproject:zephyr:2.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00077

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-48gx-3vxx-x8h6

github

больше 3 лет назад

Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.

EPSS

Процентиль: 23%

0.00077

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20