← Back

Zephyr

zephyr

Vendor: Zephyrproject • 163 CVEs

CVEs (163)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14201
1Zephyrproject
1Zephyr
Nov 21, 2024
Aug 29, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
CVE-2017-14199
1Zephyrproject
1Zephyr
Nov 21, 2024
Apr 12, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
CVE-2018-1000800
1Zephyrproject
1Zephyr
Nov 21, 2024
Sep 6, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable vi...Show more
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).Show less