CVE-2018-1000800 — NULL Pointer Dereference in Zephyr

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.4%
top 42.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Zephyrproject Zephyr
Timeline
PublishedSep 6
Latest updateMay 13

Description

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-m6rj-hx92-c739: zephyr-rtos version 1↗2022-05-13
▶
CVEList
CVE-2018-1000800: zephyr-rtos version 1↗2018-09-06
▶
CVE-2018-1000800 — NULL Pointer Dereference in Zephyr | cvebase