high7.0
CVE-2023-5184
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
Impact
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zephyrproject | Zephyr | through 3.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
- http://seclists.org/fulldisclosure/2023/Nov/1
- http://www.openwall.com/lists/oss-security/2023/11/07/1
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8x3p-q3r5-xh9g
- http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
- http://seclists.org/fulldisclosure/2023/Nov/1
- http://www.openwall.com/lists/oss-security/2023/11/07/1
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8x3p-q3r5-xh9g