Unrated severityNVD Advisory· Published Oct 5, 2021· Updated Sep 16, 2024
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
CVE-2021-3436
Description
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0, >= 2.5.0 contain Use of Multiple Resources with Duplicate Identifier (CWE-694). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=1.14.2, >=2.4.0, >=2.5.0+ 1 more
- (no CPE)range: >=1.14.2, >=2.4.0, >=2.5.0
- (no CPE)range: 1.14.2
Patches
Vulnerability mechanics
References
1- github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.