CVE-2018-1000660

TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed

published September 6, 2018

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vulnerability in Function get_package_name in the file kernel/src/tbfheader.rs, variable "pub package_name: &'static str," in the file process.rs that can result in A tock capsule (untrusted driver) could access arbitrary memory by using only safe code. This vulnerability appears to have been fixed in commit 42f7f36e74088036068d62253e1d8fb26605feed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01271 · 69.6th percentile
Published
2018-09-06T17:00Z
EPSS history
Timeline
  • 06 SEP 17:00Z
    TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed
    cvelistv5