CVE-2023-2234: BT HCI host union variant confusion
Published Jul 10, 2023
·Updated
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.
Affected Software
1 affected component
zephyrproject zephyr<=3.3.0
Event History
Jul 10, 2023
CVE Published
via MITRE·04:33 AM
Data Sourced
via MITRE·04:33 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-2234?
CVE-2023-2234 is a vulnerability that allows any malicious Bluetooth controller to execute arbitrary code on the Zephyr host.
2
How severe is CVE-2023-2234?
CVE-2023-2234 has a severity value of 8.8 (high).
3
Which software is affected by CVE-2023-2234?
Zephyrproject Zephyr versions up to and including 3.3.0 are affected by CVE-2023-2234.
4
How can I fix CVE-2023-2234?
To fix CVE-2023-2234, it is recommended to update Zephyrproject Zephyr to a version higher than 3.3.0.
5
Where can I find more information about CVE-2023-2234?
You can find more information about CVE-2023-2234 at the following link: [Github Advisory](https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx9g-8fr2-q899)