CVE-2023-5779

can: out of bounds in remove_rx_filter function

Severity Score

4.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

can: out of bounds in remove_rx_filter function

puede: fuera de los límites en la función remove_rx_filter

*Credits: N/A

CVSS Scores

Zephyr Projectv3.1 4.4

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-10-26 CVE Reserved
2024-02-18 CVE Published
2024-02-18 EPSS Updated
2024-08-28 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-787: Out-of-bounds Write

CAPEC

References (1)

URL	Tag	Source
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7cmj-963q-jj47

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zephyrproject-rtos Search vendor "Zephyrproject-rtos"		Zephyr Search vendor "Zephyrproject-rtos" for product "Zephyr"				<= 3.5 Search vendor "Zephyrproject-rtos" for product "Zephyr" and version " <= 3.5"		en		Affected