Zephyr HTTP/2 server null pointer dereference halts devices
Zephyr, an operating system for smart devices, has a web server that can freeze.
Summary
Zephyr's HTTP/2 server writes through a null pointer when given a crafted header sequence, which halts the device. Any reachable peer can trigger it without logging in, in builds with CONFIG_HTTP_SERVER.
Affected when
- Built with CONFIG_HTTP_SERVER
- Cleartext h2c connections accepted
What to do
Check the Zephyr advisory and newest release. Affected versions are 4.1.0 up to before 4.3.2, and 4.4.0 up to before 4.5.0. Confirm you run a newer version and update.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen