7.5Yüksek

CVE-2024-8361DoS caused due to wrong hash length returned for SHA2/224 algorithm

silabs.com WiSeConnect SDK Yayım: (1 yıl önce)

Açıklama

In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS). If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset

Zayıflık türü (CWE): CWE-131CWE-617

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
silabs.com WiSeConnect SDK ≤ 3.3.4

Kaynaklar ve yamalar