PT-2023-4150 · Zephyr · Zephyr

Ceolin · Published 2023-07-10 · Updated 2024-11-07 · CVE-2023-1901

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr (affected versions not specified)

Description The issue is related to the Bluetooth protocol implementation, specifically with the bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands. This may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash or potential remote code execution (RCE) on the Host layer. Additionally, there is a buffer overflow issue in the Zephyr real-time operating system's Bluetooth protocol implementation, which can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

CWE-672

Related Identifiers

BDU:2023-04461

CVE-2023-1901

GHSA-XVVM-8MCM-9CQ3

Affected Products

Zephyr

References · 6

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xvvm-8mcm-9cq3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04461 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-1901 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1901 · Vendor Advisory
• https://t.me/cvenotify/54375 · Telegram Post
• https://t.me/cvenotify/100947 · Telegram Post