NULL Base Pointer Reference Vulnerability in sys_ring_buf_put() and sys_ring_buf_get() in Zephyr-RTOS v1.12.0

CVE-2018-1000800 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

Learn more about our Api Penetration Testing.