CVE-2024-0240
Assigner: Silabs
Published: 2024-02-15T20:30:45.263Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: GSDK
repo: https://github.com/SiliconLabs/gecko_sdk/releases
vendor: silabs.com
versions: lessThan: 4.3.0
status: affected
version: 0
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
value: A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
impacts: capecId: CAPEC-131
descriptions: value: CAPEC-131 Resource Leak Exposure
metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
type: CWE
source: discovery: UNKNOWN
title: Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
x_generator: engine: Vulnogram 0.1.0-dev