© 2026 vulntracker.io

CVE-2017-14202

The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.

N/A

Published: August 29, 2019 at 12:44 AM UTC

Updated: June 17, 2026 at 01:05 AM UTC

1 product affected across 1 vendorZephyr

Using shell by Zephyr?

Get instant alerts when new vulnerabilities affect shell - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.6%

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Zephyr · Zephyrproject

95%

v < 1.14.0

Affected range stops below 1.14.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

x_refsource_MISCRelease NotesVendor Advisory

Source: [email protected]

https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html

x_refsource_MISCPatchThird Party Advisory

Source: [email protected]

https://github.com/zephyrproject-rtos/zephyr/pull/13048

x_refsource_MISCBroken Link

Source: [email protected]

https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18

CVSS

4.6MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card