Paper/Archive/CVE-2023-4260

CVE-2023-4260

zephyrproject-rtos Zephyr — Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

EPSS 0.9%CVSS 10.0

critical.is priorityof 100

42

CVSS 10.0 (NVD)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 58.7.587 × 2011.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.

Affected

ProductAffectedFixed inSource

Zephyr≤ 3.4–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

zephyr (CNA)6.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

References

refgithub.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gj27-862r-55wh refopenwall.com/lists/oss-security/2023/11/07/1 refseclists.org/fulldisclosure/2023/Nov/1 refpacketstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html