CVE-2020-10069: Zephyr Bluetooth unchecked packet data results in denial of service
Published May 24, 2021
·Updated
Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp
Affected Software
2 affected components
zephyrproject zephyr<=1.14.2
zephyrproject zephyr>=2.0.0<=2.2.0
Event History
May 24, 2021
CVE Published
via MITRE·09:40 PM
Data Sourced
via MITRE·09:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-10069?
CVE-2020-10069 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2020-10069?
To fix CVE-2020-10069, update Zephyr versions earlier than v1.14.2 or v2.2.0 to a secure version.
3
Which versions are affected by CVE-2020-10069?
CVE-2020-10069 affects Zephyr versions v1.14.2 and earlier, and versions between v2.0.0 and v2.2.0.
4
What type of vulnerability is CVE-2020-10069?
CVE-2020-10069 is categorized as an improper handling of parameters vulnerability.
5
What is the impact of CVE-2020-10069?
The impact of CVE-2020-10069 is potential denial of service due to unchecked packet data.