CVE-2020-10070: MQTT buffer overflow on receive buffer
Published Jun 5, 2020
·Updated
In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
Affected Software
1 affected component
zephyrproject zephyr<=2.2.0
Remediation
Event History
Jun 5, 2020
CVE Published
via MITRE·05:37 PM
Data Sourced
via MITRE·05:37 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-10070?
CVE-2020-10070 is rated as a high severity vulnerability due to the potential for memory corruption and remote code execution.
2
How do I fix CVE-2020-10070?
To fix CVE-2020-10070, update your Zephyr Project version to a patch release that addresses the improper bounds checking issue.
3
What versions are affected by CVE-2020-10070?
CVE-2020-10070 affects Zephyr Project versions 2.2.0 and later.
4
Can CVE-2020-10070 be exploited remotely?
Yes, CVE-2020-10070 can be exploited remotely due to memory corruption vulnerabilities.
5
What components of the Zephyr Project does CVE-2020-10070 impact?
CVE-2020-10070 impacts the MQTT code within the Zephyr Project.