7.5Hoch

CVE-2024-8361DoS caused due to wrong hash length returned for SHA2/224 algorithm

silabs.com WiSeConnect SDK Veröffentlicht: (vor 1 Jahr)

Beschreibung

In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS). If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset

Schwachstellentyp (CWE): CWE-131CWE-617

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
silabs.com WiSeConnect SDK ≤ 3.3.4

Referenzen und Patches