Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-56317

Опубликовано: 18 дек. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by access-control-server.cpp, i.e., a denial of service.

EPSS

Процентиль: 48%
0.00247
Низкий

7.5 High

CVSS3

Дефекты

CWE-281

Связанные уязвимости

CVSS3: 7.5
github
около 1 года назад

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by access-control-server.cpp, i.e., a denial of service.

EPSS

Процентиль: 48%
0.00247
Низкий

7.5 High

CVSS3

Дефекты

CWE-281