Vulnerability · Published Jun 5, 2020 · Assigned by zephyr
CVE-2020-10070MQTT buffer overflow on receive buffer
Critical 9.0
In plain English
A critical-severity buffer overflow in zephyr from zephyrproject-rtos. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.1)9.0Critical
Exploit odds (30 days)2.9%top 13.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| zephyrproject-rtos | zephyr | 2.2.0 – before unspecified |
Weakness: CWE-120, CWE-190 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment x_refsource_MISC
- https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-85 x_refsource_MISC
- https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10070 x_refsource_MISC
- https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/0b39cbf3c01d7feec9d0dd7cc7e0e374b6113542 x_refsource_MISC