CVE-2023-2683 MEDIUM

CVE-2023-2683: Connection update while closing connection may lead to denial-of-service

Vendor Silabs.com

Product Bluetooth SDK

Weakness CWE-401

Published June 15, 2023

Last update December 11, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Adjacent

Attack complexity High

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.

Key dates

02Disclosure timeline

June 15, 2023 CVE published

December 11, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-2683 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/401.html

Related vulnerabilities

04Related CVE

CVE-2021-23218 Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service CVE-2020-27755 CVE-2025-52986 Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks CVE-2024-3653 Undertow: learningpushhandler can lead to remote memory dos attacks CVE-2023-22410 Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.