Buffer overflow in Zephyrproject Zephyr
CVE-2020-10060
In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.
Vulnerability class: Buffer Overflow
EPSS: 0.016 (72.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Zephyrproject Zephyr
- Zephyrproject-rtos Zephyr — versions 2.1.0, 2.2.0
Weakness classification (CWE)
References
- vulnerabilities@zephyrproject.org (Third Party Advisory, x_refsource_MISC)
- vulnerabilities@zephyrproject.org (x_refsource_MISC, Vendor Advisory)
- vulnerabilities@zephyrproject.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
- vulnerabilities@zephyrproject.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
- vulnerabilities@zephyrproject.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
- vulnerabilities@zephyrproject.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-10060?
- CVE-2020-10060 is a high-severity vulnerability in Zephyrproject Zephyr, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.0/10. Published 2020-05-11.
- How severe is CVE-2020-10060?
- High severity. CVSS v3 base score is 8.0 out of 10.