Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2020-10063

Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow

Description

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos zephyr

  • 2.2.0 to < unspecifiedaffected
  • 2.1.0 to < unspecifiedaffected
  • 1.14.0 to < unspecifiedaffected

References