Описание
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet.
Ссылки
- Technical DescriptionThird Party Advisory
- ProductThird Party Advisory
- ProductThird Party Advisory
- ProductVendor Advisory
- Technical DescriptionThird Party Advisory
- ProductThird Party Advisory
- ProductThird Party Advisory
- ProductVendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
6.5 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
Связанные уязвимости
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet.
Уязвимость реализации Bluetooth Classic среды для разработки IoT приложений espressif esp-idf , связанная с записью за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3
3.3 Low
CVSS2