exploitDog

CVE-2024-27401

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

firewire: nosy: ensure user_length is taken into account when fetching packet contents

Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.36 (включая) до 4.19.314 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.276 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.217 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.159 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.91 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.31 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.8.10 (исключая)

cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00008

Низкий

7.1 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2024-27401

CVSS3: 7.1

ubuntu

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

CVE-2024-27401

CVSS3: 5.5

redhat

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

CVE-2024-27401

CVSS3: 7.1

debian

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: f ...

GHSA-wmmp-mchh-75gf

CVSS3: 7.1

github

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

BDU:2024-03934

CVSS3: 5.5

fstec

почти 2 года назад

Уязвимость функции packet_buffer_get() драйвера IEEE 1394 (FireWire) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 1%

0.00008

Низкий

7.1 High

CVSS3

Дефекты

NVD-CWE-noinfo