mirror of
https://github.com/espressif/esp-idf.git
synced 2024-10-05 20:47:46 -04:00
8027ab8398
cJSON: CVE-2024-31755 - Resolved in cJSON v1.7.18 FreeRTOS: CVE-2024-28115 - Affects only ARMv7-M MPU ports, and ARMv8-M ports Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
12 lines
653 B
YAML
12 lines
653 B
YAML
name: 'freertos'
|
|
version: '10.4.3'
|
|
cpe: cpe:2.3:o:amazon:freertos:{}:*:*:*:*:*:*:*
|
|
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
|
|
originator: 'Organization: Amazon Web Services'
|
|
description: An open-source, real-time operating system (RTOS) with additional features and patches from Espressif.
|
|
cve-exclude-list:
|
|
- cve: CVE-2021-43997
|
|
reason: This vulnerability only affects ARMv7-M and ARMv8-M ports of FreeRTOS and hence does not affect Espressif SoCs which are not based on these architectures.
|
|
- cve: CVE-2024-28115
|
|
reason: Affects only ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled
|