PT-2023-4150 · Zephyr · Zephyr

Ceolin · Publicado 2023-07-10 · Atualizado 2024-11-07 · CVE-2023-1901

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr (affected versions not specified)

Description The issue is related to the Bluetooth protocol implementation, specifically with the bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands. This may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash or potential remote code execution (RCE) on the Host layer. Additionally, there is a buffer overflow issue in the Zephyr real-time operating system's Bluetooth protocol implementation, which can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

CWE-672

Identificadores relacionados

BDU:2023-04461

CVE-2023-1901

GHSA-XVVM-8MCM-9CQ3

Produtos afetados

Zephyr

Referências · 6

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xvvm-8mcm-9cq3 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-04461 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-1901 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1901 · Aviso do Fabricante
• https://t.me/cvenotify/54375 · Publicação no Telegram
• https://t.me/cvenotify/100947 · Publicação no Telegram