CVE-2023-0779 - net: shell: Improper input validation · CoreCVE

Back Back to CVE browser

HIGH

net: shell: Improper input validation

Published May 30, 2023

7.7

HIGH

CVSS 3.1

EPSS 0.52%

Description

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

Affected products

Vendor Zephyrproject-Rtos Product Zephyr Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=v2.7.4
- Version
  unspecified
  Status
  affected
  Constraints
  <v3.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Zephyrproject-Rtos

n/a

Version	Status	Constraints
unspecified	affected	<=v2.7.4
unspecified	affected	<v3.3

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-476

NULL Pointer Dereference

References (1)

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549
Vendor Advisory

Link	Providers	Tags
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner zephyr

Published May 30, 2023

Updated Feb 13, 2025

Reserved Feb 10, 2023

Link CVE-2023-0779

CISA Vulnrichment

Updated Jan 13, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2023-0779

Severity n/a

Public date n/a

Links CVE-2023-0779