CVE-2023-0359
Assigner: zephyr
Published: 2023-07-10T04:21:21.203Z
State: PUBLISHED
affected: defaultStatus: unaffected
packageName: Zephyr
product: Zephyr
repo: https://github.com/zephyrproject-rtos/zephyr
vendor: zephyrproject-rtos
versions: lessThanOrEqual: 3.2
status: affected
version: *
versionType: git
lessThanOrEqual: 2.7.4
status: affected
version: *
versionType: git
descriptions: supportingMedia: base64: no
type: text/html
value: A missing nullptr-check in handle_ra_input can cause a nullptr-deref.
value: A missing nullptr-check in handle_ra_input can cause a nullptr-deref.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: discovery: UNKNOWN
title: ipv6: Missing ipv6  nullptr-check in handle_ra_input
x_generator: engine: Vulnogram 0.1.0-dev