Vulnerabilities > CVE-2023-3725 - Out-of-bounds Write vulnerability in Zephyrproject Zephyr
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
- http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
- http://seclists.org/fulldisclosure/2023/Nov/1
- http://seclists.org/fulldisclosure/2023/Nov/1
- http://www.openwall.com/lists/oss-security/2023/11/07/1
- http://www.openwall.com/lists/oss-security/2023/11/07/1
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2g3m-p6c7-8rr3
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2g3m-p6c7-8rr3