CVE-2018-1000800

2018-09-0617:00:00

mitre

www.cve.org

zephyr-rtos v1.12.0

null base pointer reference

sys_ring_buf_put

sys_ring_buf_get

cpu page fault

malicious application call

AI Score

9.1

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

References

github.com/zephyrproject-rtos/zephyr/issues/7638