PT-2021-20093 · Zephyr · Zephyr

Highd3Zd3Z · Published 2021-10-12 · Updated 2021-10-18 · CVE-2021-3323

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr versions 2.4.0 and later

Description The issue is related to an integer underflow in the 6LoWPAN IPHC header uncompression in Zephyr, which contains an integer underflow (wrap or wraparound) as classified by CWE-191.

Recommendations For Zephyr versions 2.4.0 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2021-3323

GHSA-89J6-QPXF-PFPC

Affected Products

Zephyr

References · 4

• 🔥 http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc · Exploit
• https://osv.dev/vulnerability/CVE-2021-3323 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3323 · Security Note
• https://t.me/cibsecurity/30473 · Telegram Post