Lucene search

K
cvelistZephyrCVELIST:CVE-2023-4260
HistorySep 26, 2023 - 7:23 p.m.

CVE-2023-4260 Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

2023-09-2619:23:48
CWE-193
CWE-120
zephyr
www.cve.org
3
cve-2023-4260
vulnerability
zephyr
file system

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

41.6%

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "Zephyr",
    "product": "Zephyr",
    "repo": "https://github.com/zephyrproject-rtos/zephyr",
    "vendor": "zephyrproject-rtos",
    "versions": [
      {
        "lessThanOrEqual": "3.4",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  }
]

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

41.6%

Related for CVELIST:CVE-2023-4260