Lucene search
K

CVE-2024-42416

🗓️ 05 Sep 2024 04:31:15Reported by freebsdType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 52 Views

ctl_report_supported_opcodes function not sufficiently validates user-provided field, allowing arbitrary write to limited kernel help memory. Vulnerable virtio_scsi can lead to code execution on host by malicious software in guest VM

Related
Detection
Affected
Refs
Social
NVD
Node
freebsdfreebsdRange13.013.3
OR
freebsdfreebsdMatch13.3-
OR
freebsdfreebsdMatch13.3p1
OR
freebsdfreebsdMatch13.3p2
OR
freebsdfreebsdMatch13.3p3
OR
freebsdfreebsdMatch13.3p4
OR
freebsdfreebsdMatch13.3p5
OR
freebsdfreebsdMatch13.4beta3
OR
freebsdfreebsdMatch14.0-
OR
freebsdfreebsdMatch14.0beta5
OR
freebsdfreebsdMatch14.0p1
OR
freebsdfreebsdMatch14.0p2
OR
freebsdfreebsdMatch14.0p3
OR
freebsdfreebsdMatch14.0p4
OR
freebsdfreebsdMatch14.0p5
OR
freebsdfreebsdMatch14.0p6
OR
freebsdfreebsdMatch14.0p7
OR
freebsdfreebsdMatch14.0p8
OR
freebsdfreebsdMatch14.0p9
OR
freebsdfreebsdMatch14.0rc3
OR
freebsdfreebsdMatch14.0rc4-p1
OR
freebsdfreebsdMatch14.1-
OR
freebsdfreebsdMatch14.1p1
OR
freebsdfreebsdMatch14.1p2
OR
freebsdfreebsdMatch14.1p3
[
  {
    "defaultStatus": "unknown",
    "modules": [
      "ctl"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p4",
        "status": "affected",
        "version": "14.1-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p10",
        "status": "affected",
        "version": "14.0-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p6",
        "status": "affected",
        "version": "13.3-RELEASE",
        "versionType": "release"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation