Zephyrproject: >> Zephyr Security Vulnerabilities
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-04-12
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).
CVSS Score
9.8
EPSS Score
0.004
Published
2018-09-06
Page 12