Approved changes feed: RSS · Atom
cpe:2.3:o:zephyrproject:zephyr:2.1.0:*:*:*:*:*:*:*part: o version: 2.1.0 update: *
| Vendor | Zephyrproject (eef6daf7-3b78-5888-804c-646f0e695bd1) |
|---|---|
| Product | Zephyr (f20ab476-7412-54eb-9a65-7712653f3d16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10067 |
vulnerable | 2026-06-08 05:16:34.106630 |
Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory
HIGH (7.5)
A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.
Published: 2020-05-11T22:26:17.372Z
Updated: 2024-09-16T16:37:34.272Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10059 |
vulnerable | 2026-06-08 05:16:34.103436 |
UpdateHub Module Explicitly Disables TLS Verification
MEDIUM (4.8)
The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
Published: 2020-05-11T22:26:16.442Z
Updated: 2024-09-17T02:07:14.701Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10058 |
vulnerable | 2026-06-08 05:16:34.102775 |
Multiple Syscalls In kscan Subsystem Performs No Argument Validation
HIGH (7.8)
Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
Published: 2020-05-11T22:26:15.962Z
Updated: 2024-09-17T01:36:46.714Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10028 |
vulnerable | 2026-06-08 05:16:34.057613 |
Multiple Syscalls In GPIO Subsystem Performs No Argument Validation
HIGH (7.8)
Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
Published: 2020-05-11T22:26:15.474Z
Updated: 2024-09-16T17:09:14.800Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10027 |
vulnerable | 2026-06-08 05:16:34.057088 |
ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers
HIGH (7.8)
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
Published: 2020-05-11T22:26:14.923Z
Updated: 2024-09-16T20:52:35.670Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10024 |
vulnerable | 2026-06-08 05:16:34.055210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10023 |
vulnerable | 2026-06-08 05:16:34.046119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10022 |
vulnerable | 2026-06-08 05:16:34.043905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.