CVE-2024-24746
Assigner: apache
Published: 2024-04-06T11:56:07.232Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache NimBLE
vendor: Apache Software Foundation
versions: lessThanOrEqual: 1.6.0
status: affected
version: 0
versionType: custom
credits: type: reporter
value: Baptiste Boyer from Quarkslab Vulnerability Reports team
descriptions: supportingMedia: base64: no
type: text/html
value: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.&nbsp;<br><br>Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.<br><br><span style="background-color: var(--wht);">This issue affects Apache NimBLE: through 1.6.0.<br></span><span style="background-color: var(--wht);">Users are recommended to upgrade to version 1.7.0, which fixes the issue.</span>
value: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE. 

Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.

This issue affects Apache NimBLE: through 1.6.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-835
description: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
type: CWE
source: discovery: EXTERNAL
title: Apache NimBLE: Denial of service in NimBLE Bluetooth stack
x_generator: engine: Vulnogram 0.1.0-dev