michaelh/zephyr
1
0
Fork 0
Code Releases Activity

doc: security: Disclose CVE-2024-3332

Browse source 
Disclose information about published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
This commit is contained in:
Flavio Ceolin 2024-07-02 22:11:22 -07:00 • committed by Alberto Escolar
commit f80c75c3da
2 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
doc/releases/release-notes-3.7.rst
View file

@ -82,7 +82,8 @@ https://docs.zephyrproject.org/latest/security/vulnerabilities.html
* CVE-2024-3077 `Zephyr project bug tracker GHSA-gmfv-4vfh-2mh8
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gmfv-4vfh-2mh8>`_
* CVE-2024-3332 Under embargo until 2024-07-01
* CVE-2024-3332 `Zephyr project bug tracker GHSA-jmr9-xw2v-5vf4
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jmr9-xw2v-5vf4>`_
* CVE-2024-4785: Under embargo until 2024-08-07

14
doc/security/vulnerabilities.rst
View file

@ -1720,7 +1720,19 @@ This has been fixed in main for v3.7.0
CVE-2024-3332
-------------
Under embargo until 2024-07-01
Bluetooth: DoS caused by null pointer dereference.
A malicious BLE device can send a specific order of packet
sequence to cause a DoS attack on the victim BLE device.
- `Zephyr project bug tracker GHSA-jmr9-xw2v-5vf4
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jmr9-xw2v-5vf4>`_
This has been fixed in main for v3.7.0
- `PR 71030 fix for main
<https://github.com/zephyrproject-rtos/zephyr/pull/71030>`_
CVE-2024-4785
-------------