[<prev] [next>] [day] [month] [year] [list]
Message-ID: <d845a9b0-d94f-2afa-956b-2deb2be2357b@apache.org>
Date: Fri, 05 Apr 2024 07:20:06 +0000
From: Szymon Janc <janc@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2024-24746: Apache NimBLE: Denial of service in NimBLE
Bluetooth stack
Severity: important
Affected versions:
- Apache NimBLE through 1.6.0
Description:
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.
Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.
This issue affects Apache NimBLE: through 1.6.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Credit:
Iván Arce from Quarkslab Vulnerability Reports team (reporter)
References:
https://mynewt.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-24746
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
