Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-14201

The shell DNS command can cause unpredictable results due to misuse of stack variables.

Description

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zephyr shell

  • prior to 1.14.0affected

References