CVE-2023-5139: Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver
Published Oct 26, 2023
·Updated
Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver
Affected Software
1 affected component
zephyrproject zephyr<=3.4.0
Event History
Oct 26, 2023
CVE Published
via MITRE·04:40 AM
Data Sourced
via MITRE·04:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-5139?
CVE-2023-5139 is a potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver.
2
Where can I find more details about CVE-2023-5139?
More details about CVE-2023-5139 can be found at the following link: [https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-rhrc-pcxp-4453]
3
What is the severity of CVE-2023-5139?
CVE-2023-5139 has a severity rating of 7.8 (high).
4
Which software versions are affected by CVE-2023-5139?
The Zephyr STM32 Crypto driver versions up to and including 3.4.0 are affected by CVE-2023-5139.
5
How can I fix CVE-2023-5139?
To fix CVE-2023-5139, it is recommended to update to a version of the Zephyr STM32 Crypto driver that is not affected by the vulnerability.