CVE-2023-2683
15.06.2023, 20:15
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.Enginsight
| Vendor | Product | Version |
|---|---|---|
| silabs | bluetooth_low_energy_software_development_kit | 5.0.0 ≤ 𝑥 ≤ 5.1.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-401 - Missing Release of Memory after Effective LifetimeThe software does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References