Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-7060

Missing Security Control in Zephyr OS IP Packet Handling

Description

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos Zephyr

Default version status: unaffected

  • * to ≤ 3.5affected

References