Skip to content

Commit 90b9809

Browse files
Flavio Ceolinjhedberg
Flavio Ceolin
authored andcommitted
doc: security: cve-2023-4257 left embargo
Disclose information about cve-2023-4257. Signed-off-by: Flavio Ceolin <[email protected]>
1 parent 52cf7e6 commit 90b9809

File tree

2 files changed

+15
-2
lines changed

2 files changed

+15
-2
lines changed

doc/releases/release-notes-3.5.rst

+2-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,8 @@ https://docs.zephyrproject.org/latest/security/vulnerabilities.html
2323
* CVE-2023-3725 `Zephyr project bug tracker GHSA-2g3m-p6c7-8rr3
2424
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2g3m-p6c7-8rr3>`_
2525

26-
* CVE-2023-4257: Under embargo until 2023-10-12
26+
* CVE-2023-4257 `Zephyr project bug tracker GHSA-853q-q69w-gf5j
27+
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j>`_
2728

2829
* CVE-2023-4258 `Zephyr project bug tracker GHSA-m34c-cp63-rwh7
2930
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-m34c-cp63-rwh7>`_

doc/security/vulnerabilities.rst

+13-1
Original file line numberDiff line numberDiff line change
@@ -1370,7 +1370,19 @@ This has been fixed in main for v3.5.0
13701370
CVE-2023-4257
13711371
-------------
13721372

1373-
Under embargo until 2023/10/12
1373+
Unchecked user input length in the Zephyr WiFi shell module can cause
1374+
buffer overflows.
1375+
1376+
- `Zephyr project bug tracker GHSA-853q-q69w-gf5j
1377+
<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j>`_
1378+
1379+
This has been fixed in main for v3.5.0
1380+
1381+
- `PR 605377 fix for main
1382+
<https://github.com/zephyrproject-rtos/zephyr/pull/605377>`_
1383+
1384+
- `PR 61383 fix for 3.4
1385+
<https://github.com/zephyrproject-rtos/zephyr/pull/61383>`_
13741386

13751387
CVE-2023-4258
13761388
-------------

0 commit comments

Comments
 (0)