Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-10067

Опубликовано: 11 мая 2020
Источник: nvd
CVSS3: 7.5
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:zephyrproject:zephyr:1.14.1:*:*:*:*:*:*:*
cpe:2.3:o:zephyrproject:zephyr:2.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-190
CWE-190

Связанные уязвимости

github
больше 3 лет назад

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-190
CWE-190