Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43616
HistoryOct 09, 2023 - 6:34 a.m.

Buffer Overflow

2023-10-0906:34:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
buffer overflow
libzephyr.so
ipm_imx.c
ipm_mcux.c
max_msg
software

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability is due to the imx_mu_ipm_send function in ipm_imx.c and the mcux_mailbox_ipm_send function in ipm_mcux.c which is susceptible to buffer overflow if the size parameter is negative, as a result of signed/unsigned conversion mishandling. The fix introduces a static int send in ipm_cavs_host.c check to ensure that the size is neither negative nor exceeds MAX_MSG.

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for VERACODE:43616