PT-2023-31898 · Zephyr · Zephyr Ipm Drivers

0Xdea · Published 2023-09-27 · Updated 2023-12-21 · CVE-2023-5184

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr IPM drivers (affected versions not specified)

Description The issue involves two potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM drivers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-195

CWE-681

Related Identifiers

CVE-2023-5184

GHSA-8X3P-Q3R5-XH9G

Affected Products

Zephyr Ipm Drivers

References · 9

• 🔥 https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8x3p-q3r5-xh9g · Exploit
• 🔥 http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html · Exploit
• https://osv.dev/vulnerability/CVE-2023-5184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5184 · Security Note
• https://twitter.com/CVEnew/status/1707087594838778285 · Twitter Post
• https://t.me/cibsecurity/71144 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1707141409847787768 · Twitter Post
• http://openwall.com/lists/oss-security/2023/11/07/1 · Note
• http://seclists.org/fulldisclosure/2023/Nov/1 · Note