CVE-2023-0397 CRITICAL

CVE-2023-0397: DoS: Invalid Initialization in le_read_buffer_size_complete

Vendor Zephyrproject-Rtos
Product zephyr
Weakness CWE-703
Published January 19, 2023
Last update April 3, 2025
View on NVD All CVEs

CVSS base score

9.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

What the vulnerability does

01Description

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

Key dates

02Disclosure timeline

January 19, 2023 CVE published
April 3, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-0241 Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart CVE-2024-21593 Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash CVE-2021-0240 Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart. CVE-2025-58758 TinyEnv: Missing .env file not required — may cause unexpected behavior CVE-2025-59836 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests