CVE-2023-5055: L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
Published Nov 21, 2023
·Updated
Possible variant of CVE-2021-3434 in function leecredreconfreq.
Affected Software
1 affected component
zephyrproject zephyr<=3.4.0
Event History
Nov 21, 2023
CVE Published
06:05 PM
Data Sourced
06:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-5055?
CVE-2023-5055 is a vulnerability that allows for a possible stack-based buffer overflow in the le_ecred_reconf_req() function in the L2CAP protocol.
2
What is the severity of CVE-2023-5055?
The severity of CVE-2023-5055 is critical with a severity value of 9.8.
3
How does CVE-2023-5055 affect Zephyrproject Zephyr?
CVE-2023-5055 affects Zephyrproject Zephyr versions up to and including 3.4.0.
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-5055?
CVE-2023-5055 has the CWE-121 and CWE-787 weaknesses.
5
Is there a fix for CVE-2023-5055?
You can find a fix for CVE-2023-5055 in the provided reference link: <https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wr8r-7f8x-24jj>.