CVE-2020-10065: Missing Size Checks in Bluetooth HCI over SPI
Published May 24, 2021
·Updated
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c
Affected Software
2 affected components
zephyrproject zephyr<=1.14.2
zephyrproject zephyr>=2.0.0<=2.2.0
Event History
May 24, 2021
CVE Published
via MITRE·09:40 PM
Data Sourced
via MITRE·09:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-10065?
The severity of CVE-2020-10065 is high with a severity value of 8.8.
2
Which versions of Zephyr are affected by CVE-2020-10065?
Zephyr versions >= v1.14.2 and >= v2.2.0 are affected by CVE-2020-10065.
3
What is the CWE ID of CVE-2020-10065?
The CWE ID of CVE-2020-10065 is CWE-130.
4
How can I find more information about CVE-2020-10065?
You can find more information about CVE-2020-10065 at http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c.
5
How do I fix CVE-2020-10065?
To fix CVE-2020-10065, it is recommended to update Zephyr to a version that contains the proper fixes.