CVE-2020-10064
Improper Input Frame Validation in ieee802154 Processing
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7
Una Comprobación Inapropiada de la Trama de Entrada en el Procesamiento ieee802154. Zephyr versiones posteriores a v1.14.2 incluyéndola, versiones posteriores a v2.2.0 incluyéndola, contienen un Desbordamiento de búfer en la región Stack de la memoria (CWE-121), Desbordamiento de Búfer en la región Heap de la memoria (CWE-122). Para mayor información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-03-04 CVE Reserved
- 2021-05-24 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-121: Stack-based Buffer Overflow
- CWE-122: Heap-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Zephyrproject Search vendor "Zephyrproject" | Zephyr Search vendor "Zephyrproject" for product "Zephyr" | <= 1.14.2 Search vendor "Zephyrproject" for product "Zephyr" and version " <= 1.14.2" | - |
Affected
| ||||||
Zephyrproject Search vendor "Zephyrproject" | Zephyr Search vendor "Zephyrproject" for product "Zephyr" | >= 2.0.0 <= 2.2.0 Search vendor "Zephyrproject" for product "Zephyr" and version " >= 2.0.0 <= 2.2.0" | - |
Affected
|