Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Stuartlyo

#26651de 56,328
9.8CVSS total
Vulnerabilidades · 1
PT-2018-9526
9.8
2018-09-06
Linux Foundation · Zephyr Rtos · CVE-2018-1000800
**Name of the Vulnerable Software and Affected Versions** zephyr-rtos version 1.12.0 **Description** The issue is related to a NULL base pointer reference in the `sys ring buf put()` and `sys ring buf get()` functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a malicious application calling the vulnerable kernel APIs, specifically `sys ring buf get()` and `sys ring buf put()`. **Recommendations** For zephyr-rtos version 1.12.0, consider restricting access to the `sys ring buf get()` and `sys ring buf put()` functions until a patch is available. As a temporary workaround, avoid using these functions in applications to minimize the risk of exploitation.