CVE-2017-14201

Published: Aug 29, 2019

Modified: Sep 17, 2024

PUBLISHED

Description

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

Vendor	Product	Versions
Zephyr	shell	affected `prior to 1.14.0`

Weaknesses (CWE)

CWE-416

References

https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-17

x_refsource_MISC

https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html

x_refsource_MISC

https://github.com/zephyrproject-rtos/zephyr/pull/13260

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-14201

Description

Affected Products

Weaknesses (CWE)

References