Skip to content
OpenAdvisories
Unscored CVE-2017-14201 EUVD-2017-5711GHSA-v422-67vr-jrj5

The shell DNS command can cause unpredictable results due to misuse of stack variables.

Published Aug 29, 2019 · Updated Sep 17, 2024 · Assigned by zephyr

Description

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

Affected products

VendorProductAffectedFixed
Zephyr shell prior to 1.14.0 —

References