Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-24246HistoryFeb 29, 2024 - 8:15 p.m.
CVE-2024-24246
2024-02-2920:15:41
Alpine Linux Development Team
security.alpinelinux.org
6
vulnerability
qpdf
buffer overflow
crash
application
unix
cve-2024-24246
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.20-community | noarch | qpdf | = 11.9.0-r0 | UNKNOWN |
Related
openvas
openvas
Fedora: Security Advisory for qpdf (FEDORA-2024-8762164e47)
2024-03-11 00:00:00
Fedora: Security Advisory for qpdf (FEDORA-2024-daa7df59d6)
2024-03-11 00:00:00
Ubuntu: Security Advisory (USN-6713-1)
2024-03-26 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: qpdf-11.6.4-2.fc39
2024-03-10 01:07:35
[SECURITY] Fedora 40 Update: qpdf-11.9.0-1.fc40
2024-03-23 00:45:46
[SECURITY] Fedora 38 Update: qpdf-11.6.4-2.fc38
2024-03-10 01:23:37
osv
osv
qpdf vulnerability
2024-03-25 12:01:37
CVE-2024-24246
2024-02-29 20:15:41
nessus
nessus
Fedora 38 : qpdf (2024-daa7df59d6)
2024-03-10 00:00:00
Fedora 39 : qpdf (2024-8762164e47)
2024-03-10 00:00:00
Fedora 40 : qpdf (2024-7d55be81bd)
2024-04-29 00:00:00
ubuntucve
ubuntucve
CVE-2024-24246
2024-02-29 00:00:00
mageia
mageia
Updated qpdf packages fix security vulnerability
2024-03-20 06:35:18
veracode
veracode
Buffer Overflow
2024-03-06 04:34:03
prion
prion
Heap overflow
2024-02-29 20:15:00
cve
cve
CVE-2024-24246
2024-02-29 20:15:41
debiancve
debiancve
CVE-2024-24246
2024-02-29 20:15:41
redhatcve
redhatcve
CVE-2024-24246
2024-03-01 06:04:06
ubuntu
ubuntu
QPDF vulnerability
2024-03-25 00:00:00
cvelist
cvelist
CVE-2024-24246
2024-02-29 00:00:00
nvd
nvd
CVE-2024-24246
2024-02-29 20:15:41
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Related for ALPINE:CVE-2024-24246