2 lines
6.3 KiB
JSON
2 lines
6.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"zephyr","vendor":"zephyrproject-rtos","versions":[{"lessThan":"unspecified","status":"affected","version":">1.14.0","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":">2.5.0","versionType":"custom"}]}],"source":"vulnerabilities@zephyrproject.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.0:-:*:*:*:*:*:*","matchCriteriaId":"5335FA2C-9A79-40F6-826F-BAC18A67119B","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DEBD3882-A442-4C05-B0D8-0CB3E0A40FDC","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3ABA1766-06A8-4DBE-BAFC-FB80BFC7479F","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2C688ACD-EB21-4EB8-BD18-346461AA00A9","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.1:-:*:*:*:*:*:*","matchCriteriaId":"81451111-93D1-472E-86F7-19B2EAF204F7","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.1:rc1:*:*:*:*:*:*","matchCriteriaId":"0A323B6E-F8DF-46FC-A196-192BE2D02D14","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1E577E10-785B-4B61-A68F-11FDD90C3978","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.1:rc3:*:*:*:*:*:*","matchCriteriaId":"BE6A58E9-5CB8-47B1-8EB4-2577820C534C","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.2:*:*:*:*:*:*:*","matchCriteriaId":"B74694FC-5442-4F7E-AACF-0E1753F50148","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59613BD2-C171-4C2C-A5D4-EEEC4824AED1","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:1.14.3:rc2:*:*:*:*:*:*","matchCriteriaId":"01DC16EF-D7A0-4FB6-989A-18E0079C1CBE","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.0:-:*:*:*:*:*:*","matchCriteriaId":"E3F6440A-9503-41ED-9BAB-CA0265C707B6","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"353849CD-BC4B-4ADB-96E9-5EAB93023E9F","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"07DA9C8D-1B2C-4B8A-9D23-2626DAD906BF","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"88672A18-976F-469A-A570-D6815637C34E","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"E68E950F-AB7E-4CC5-B0DF-6D9DEBE13A29","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"487B9DEC-FA4B-4007-8C1C-82165ECE5F75","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.6.0:-:*:*:*:*:*:*","matchCriteriaId":"05609E26-61CD-494F-97D3-B0235B0CE539","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E42A2A00-1210-4BAB-A740-A27E54511521","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4568B890-B0EB-4EBE-8DE6-95D346928C72","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"50DAD9FB-908B-4977-869E-8920EFF30DFE","vulnerable":true},{"criteria":"cpe:2.3:o:zephyrproject:zephyr:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"5E0931CF-F40A-4D7E-BC45-5DBD86C0CC99","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4"},{"lang":"es","value":"El decodificador JSON de Zephyr decodifica incorrectamente un array de array. Zephyr versiones anteriores y posteriores a 1.14.0 incluyéndola, versiones anteriores y posteriores a 2.5.0 incluyéndola, contienen Intento de Acceso a Child de un Puntero No Estructurado (CWE-588). Para más información, consulte https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4"}],"id":"CVE-2021-3510","lastModified":"2026-06-17T04:05:15.730","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"vulnerabilities@zephyrproject.org","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-10-05T21:15:09.353","references":[{"source":"vulnerabilities@zephyrproject.org","tags":["Patch","Third Party Advisory"],"url":"http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4"}],"sourceIdentifier":"vulnerabilities@zephyrproject.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-588"}],"source":"vulnerabilities@zephyrproject.org","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|