Vulnerabilities > CVE-2018-1000800 - NULL Pointer Dereference vulnerability in Zephyrproject Zephyr 1.12.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |