VYPR
← All advisories
Unrated severityNVD Advisory· Published May 11, 2020· Updated Sep 16, 2024

Shell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trim

CVE-2020-10023

Description

The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in denial of service or possibly code execution within the Zephyr kernel. See NCC-NCC-019 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.

Affected products

1

Patches

3
9d3186c43a8f

shell: utils: Fix buffer overrun in shell_spaces_trim

https://github.com/zephyrproject-rtos/zephyrFlavio CeolinMar 5, 2020via osv
commitPR #23649
1 file changed · +1 −1
  • subsys/shell/shell_utils.c+1 −1 modified
    @@ -413,7 +413,7 @@ void shell_spaces_trim(char *str)
 					/* +1 for EOS */
 					memmove(&str[i + 1],
 						&str[j],
-						len - shift + 1);
+						len - j + 1);
 					len -= shift;
 					shift = 0U;
 				}
13fd2d343bfb

shell: utils: Fix buffer overrun in shell_spaces_trim

https://github.com/zephyrproject-rtos/zephyrFlavio CeolinMar 5, 2020via osv
commitPR #23646
1 file changed · +1 −1
  • subsys/shell/shell_utils.c+1 −1 modified
    @@ -324,7 +324,7 @@ void shell_spaces_trim(char *str)
 					/* +1 for EOS */
 					memmove(&str[i + 1],
 						&str[j],
-						len - shift + 1);
+						len - j + 1);
 					len -= shift;
 					shift = 0U;
 				}
a2872c3a008d

shell: utils: Fix buffer overrun in shell_spaces_trim

https://github.com/zephyrproject-rtos/zephyrFlavio CeolinMar 5, 2020via osv
commitPR #23304
1 file changed · +1 −1
  • subsys/shell/shell_utils.c+1 −1 modified
    @@ -413,7 +413,7 @@ void shell_spaces_trim(char *str)
 					/* +1 for EOS */
 					memmove(&str[i + 1],
 						&str[j],
-						len - shift + 1);
+						len - j + 1);
 					len -= shift;
 					shift = 0U;
 				}

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.