Vulnerabilities > CVE-2020-10069 - Unspecified vulnerability in Zephyrproject Zephyr

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

zephyrproject

NVD

Published: 2021-05-25

Updated: 2021-05-27

Summary

Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp

Vulnerable Configurations

Part	Description	Count
OS	Zephyrproject Zephyrproject Zephyr - Zephyrproject Zephyr 1.0.0 Zephyrproject Zephyr 1.1.0 Zephyrproject Zephyr 1.2.0 Zephyrproject Zephyr 1.3.0 Zephyrproject Zephyr 1.4.0 Zephyrproject Zephyr 1.5.0 Zephyrproject Zephyr 1.6.0 Zephyrproject Zephyr 1.6.1 Zephyrproject Zephyr 1.6.99 Zephyrproject Zephyr 1.7.0 Zephyrproject Zephyr 1.7.1 Zephyrproject Zephyr 1.7.99 Zephyrproject Zephyr 1.8.0 Zephyrproject Zephyr 1.8.99 Zephyrproject Zephyr 1.9.0 Zephyrproject Zephyr 1.9.1 Zephyrproject Zephyr 1.9.2 Zephyrproject Zephyr 1.10.0 Zephyrproject Zephyr 1.11.0 Zephyrproject Zephyr 1.12.0 Zephyrproject Zephyr 1.13.0 Zephyrproject Zephyr 1.14.0 Zephyrproject Zephyr 1.14.1 Zephyrproject Zephyr 1.14.2 Zephyrproject Zephyr 2.0.0 Zephyrproject Zephyr 2.1.0 Zephyrproject Zephyr 2.2.0	84

References

http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp