Lucene search
SilabsCVE-2023-0775HistoryMar 28, 2023 - 5:15 p.m.
CVE-2023-0775
2023-03-2817:15:12
CWE-20
Silabs
web.nvd.nist.gov
32
cve-2023-0775
bluetooth le
stack
memory
denial-of-service
nvd
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
23.6%
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.
Affected configurations
Node
silabsgecko_software_development_kitMatch5.1.0
ORsilabsgecko_software_development_kitMatch5.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| silabs | gecko_software_development_kit | 5.1.0 | cpe:2.3:a:silabs:gecko_software_development_kit:5.1.0:*:*:*:*:*:*:* |
| silabs | gecko_software_development_kit | 5.1.1 | cpe:2.3:a:silabs:gecko_software_development_kit:5.1.1:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "GSDK",
"vendor": "silabs.com",
"versions": [
{
"changes": [
{
"at": "5.1.0",
"status": "affected"
}
],
"lessThanOrEqual": "v5.1.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2023-03-28 17:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-0775
2023-03-28 17:15:12
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
23.6%
Related for CVE-2023-0775