Skip to content
OpenAdvisories
Unscored CVE-2018-1000800 EUVD-2018-2004GHSA-m6rj-hx92-c739

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result i…

Published Sep 6, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

References