exploitDog

CVE-2023-4265

Опубликовано: 12 авг. 2023

Источник: nvd

CVSS3: 6.4

CVSS3: 6.8

EPSS Низкий

Описание

Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841

Ссылки

http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/07/1
Mailing List
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4vgv-5r6q-r6xh
Exploit
Vendor Advisory
http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/07/1
Mailing List
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4vgv-5r6q-r6xh
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*

Версия до 3.3.0 (включая)

EPSS

Процентиль: 53%

0.00301

Низкий

6.4 Medium

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-120

CWE-120

EPSS

Процентиль: 53%

0.00301

Низкий

6.4 Medium

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-120

CWE-120