Vulnerability · Published May 11, 2020 · Assigned by zephyr

CVE-2020-10067Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory

High 7.5

In plain English

A high-severity integer overflow in zephyr from zephyrproject-rtos. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 61.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

Affected products (as reported)

Vendor	Product	Versions
zephyrproject-rtos	zephyr	1.14.1 – before unspecified2.1.0 – before unspecified

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

References

https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27 x_refsource_MISC
https://github.com/zephyrproject-rtos/zephyr/pull/23239 x_refsource_MISC
https://github.com/zephyrproject-rtos/zephyr/pull/23653 x_refsource_MISC
https://github.com/zephyrproject-rtos/zephyr/pull/23654 x_refsource_MISC
https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067 x_refsource_MISC