CVE-2020-10021 Information

Description

Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024 NCC-ZEP-025 NCC-ZEP-026 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://docs.zephyrproject.org/latest/security/vulnerabilities.htmlcve-2020-10021 https://github.com/zephyrproject-rtos/zephyr/pull/23240 https://github.com/zephyrproject-rtos/zephyr/pull/23455 https://github.com/zephyrproject-rtos/zephyr/pull/23456 https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-26

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

7.8