CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-13598 – FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat
https://notcve.org/view.php?id=CVE-2020-13598
FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h FS: Desbordamiento del búfer al habilitar Nombres de Archivo Largos en FAT_FS y llamar a fs_stat. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.3.0 incluyéndola, contienen un Desbordamiento del Búfer en la región Stack de la memoria (CWE-121). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h • http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2020-10072 – Improper Handling of Insufficient Permissions or Privileges in zephyr
https://notcve.org/view.php?id=CVE-2020-10072
Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc Un manejo Inapropiado de Permisos o Privilegios Insuficientes en zephyr. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.2.0 incluyéndola contienen un Manejo Inapropiado de Permisos o Privilegios insuficientes (CWE-280). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc • http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc • CWE-280: Improper Handling of Insufficient Permissions or Privileges •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-10069 – Zephyr Bluetooth unchecked packet data results in denial of service
https://notcve.org/view.php?id=CVE-2020-10069
Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp Zephyr Bluetooth los datos de paquetes no comprobados, resultan en una denegación de servicio. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.2.0 incluyéndola contienen un manejo inapropiado de parámetros (CWE-233). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp • http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp • CWE-233: Improper Handling of Parameters •
CVSS: 5.7EPSS: 0%CPEs: 2EXPL: 0CVE-2020-10066 – Incorrect Error Handling in Bluetooth HCI core
https://notcve.org/view.php?id=CVE-2020-10066
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr Un Manejo Incorrecto de Errores en el core HCI de Bluetooth. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.2.0 incluyéndola contienen una desreferencia de puntero NULL (CWE-476). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr • http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr • CWE-476: NULL Pointer Dereference •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-10065 – Missing Size Checks in Bluetooth HCI over SPI
https://notcve.org/view.php?id=CVE-2020-10065
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c Una falta de Comprobaciones de Tamaño en Bluetooth HCI sobre SPI. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.2.0 incluyéndola, contienen un Manejo Inapropiado de la Inconsistencia del Parámetro Length (CWE-130). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c • http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c • CWE-130: Improper Handling of Length Parameter Inconsistency CWE-787: Out-of-bounds Write •