doc: vuln: Add information about CVE-2023-4264

Information about CVE-2023-4264 Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
blemouzy · Oct 4, 2023 · 0789676 · 0789676
1 parent e9e698e
commit 0789676
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/doc/security/vulnerabilities.rst b/doc/security/vulnerabilities.rst
@@ -1368,6 +1368,28 @@ Potential buffer overflow vulnerabilities in the Zephyr Mgmt subsystem
 
 - This issue has not been fixed.
 
+CVE-2023-4264
+-------------
+
+Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
+
+- `Zephyr project bug tracker GHSA-rgx6-3w4j-gf5j
+ <https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-rgx6-3w4j-gf5j>`_
+
+This has been fixed in main for v3.5.0
+
+- `PR 58834 fix for main
+ <https://github.com/zephyrproject-rtos/zephyr/pull/58834>`_
+
+- `PR 60465 fix for main
+ <https://github.com/zephyrproject-rtos/zephyr/pull/60465>`_
+
+- `PR 61845 fix for main
+ <https://github.com/zephyrproject-rtos/zephyr/pull/61845>`_
+
+- `PR 61385 fix for 3.4
+ <https://github.com/zephyrproject-rtos/zephyr/pull/61385>`_
+
 CVE-2023-4265
 -------------