Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-1305

Опубликовано: 08 июл. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

РелизСтатусПримечание
devel

not-affected

Windows only
esm-infra-legacy/trusty

not-affected

Windows only
esm-infra/bionic

not-affected

Windows only
esm-infra/focal

not-affected

Windows only
esm-infra/xenial

not-affected

Windows only
focal

not-affected

Windows only
jammy

not-affected

Windows only
mantic

ignored

end of life, was needs-triage
noble

not-affected

Windows only
trusty/esm

not-affected

Windows only

Показывать по

EPSS

Процентиль: 88%
0.04282
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
12 месяцев назад

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

CVSS3: 9.8
github
12 месяцев назад

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость драйвера tap-windows6 программного обеспечения OpenVPN операционных систем Windows, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 88%
0.04282
Низкий

9.8 Critical

CVSS3