CVE-2023-2683CWE-401

Connection update while closing connection may lead to denial-of-service

Medium · published June 15, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2023-06-15T19:05Z
EPSS history
Timeline
  • 15 JUN 19:05Z
    Connection update while closing connection may lead to denial-of-service
    cvelistv5