exploitDog

CVE-2023-5184

Опубликовано: 27 сент. 2023

Источник: nvd

CVSS3: 7

CVSS3: 8.8

EPSS Низкий

Описание

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.

Ссылки

http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/07/1
Mailing List
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8x3p-q3r5-xh9g
Exploit
Vendor Advisory
http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/07/1
Mailing List
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8x3p-q3r5-xh9g
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*

Версия до 3.4.0 (включая)

EPSS

Процентиль: 56%

0.00338

Низкий

7 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-120

CWE-120

EPSS

Процентиль: 56%

0.00338

Низкий

7 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-120

CWE-120