PT-2020-11890 · Zephyr · Zephyr

Gerson Fernando Budke + 1 · Published 2020-05-11 · Updated 2021-10-18 · CVE-2020-10060

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions zephyrproject-rtos zephyr versions 2.1.0 through 2.2.0 and later versions.

Description The issue occurs after JSON parsing is complete in updatehub probe, where accessing objects[1] from the output structure can lead to referencing uninitialized stack memory if the JSON contains less than two elements. This could result in a crash, denial of service, or possibly an information leak. The attack requires server compromise if the fix for the related issue is applied.

Recommendations For zephyr versions 2.1.0 and later, apply the fix provided to prevent accessing uninitialized stack memory. For zephyr version 2.2.0 and later, ensure the fix is applied to mitigate the risk of a crash, denial of service, or information leak.

Fix

Access of Uninitialized Pointer

Buffer Overflow

Weakness Enumeration

CWE-824

CWE-119

Related Identifiers

CVE-2020-10060

Affected Products

Zephyr

References · 8

• https://github.com/zephyrproject-rtos/zephyr/pull/27891 · Patch
• https://github.com/zephyrproject-rtos/zephyr/pull/27865 · Patch
• https://github.com/zephyrproject-rtos/zephyr/pull/27893 · Patch
• https://github.com/zephyrproject-rtos/zephyr/pull/27889 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-10060 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10060 · Vendor Advisory
• https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10060 · Vendor Advisory
• https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-37 · Note