CVE-2024-24746
CVSS V2 None
CVSS V3 None
Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.
Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.
This issue affects Apache NimBLE: through 1.6.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Overview
- CVE ID
- CVE-2024-24746
- Assigner
- apache
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-04-06T11:56:07.232Z
- Last Modified Date
- 2024-04-10T08:38:37.008Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://lists.apache.org/thread/bptkzc0o2ymjk8qqzqdmy39kcmh27078 | vendor-advisory |
| https://github.com/apache/mynewt-nimble/commit/d42a0ebe6632bd0c318560e4293a522634f60594 | patch |
| http://www.openwall.com/lists/oss-security/2024/04/05/2 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-24746 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24746 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 04:19:31 | Added to TrackCVE |