CVE-2023-7060: Missing Security Control in Zephyr OS IP Packet Handling
Published Mar 15, 2024
·Updated
Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address.
Affected Software
2 affected components
Zephyr Project Zephyr OS
zephyrproject zephyr<3.6.0
Event History
Mar 15, 2024
CVE Published
via MITRE·06:12 PM
Data Sourced
via MITRE·06:12 PM
DescriptionSeverity
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-7060?
CVE-2023-7060 is classified as a medium-severity vulnerability.
2
How do I fix CVE-2023-7060?
To fix CVE-2023-7060, update Zephyr OS to version 3.6.0 or later.
3
What does CVE-2023-7060 affect?
CVE-2023-7060 affects versions of Zephyr OS prior to 3.6.0, specifically in the IP packet handling implementation.
4
What is the risk associated with CVE-2023-7060?
The risk associated with CVE-2023-7060 includes potential unauthorized access through improperly handled IP packets.
5
Are there any workarounds for CVE-2023-7060?
Currently, there are no official workarounds for CVE-2023-7060 other than applying the patch by upgrading the software.