Lucene search

CVE-2024-27401 firewire: nosy: ensure user_length is taken into account when fetching packet contents

🗓️ 13 May 2024 10:53:29Reported by LinuxType

CVE-2024-27401 firewire: ensure user_length is used for packet content

Reporter	Title	Published	Views	Family All 117
CVE	CVE-2024-27401	14 May 202415:12	–	cve
UbuntuCve	CVE-2024-27401	14 May 202400:00	–	ubuntucve
NVD	CVE-2024-27401	14 May 202415:12	–	nvd
OSV	CVE-2024-27401	14 May 202415:12	–	osv
OSV	linux - security update	2 Jun 202400:00	–	osv
OSV	linux-5.10 - security update	25 Jun 202400:00	–	osv
OSV	linux, linux-aws, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities	8 Aug 202422:09	–	osv
OSV	linux-oracle vulnerabilities	13 Aug 202414:11	–	osv
OSV	linux-aws-5.15, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-raspi vulnerabilities	13 Aug 202400:30	–	osv
OSV	linux-hwe-5.15 vulnerabilities	21 Aug 202417:06	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/firewire/nosy.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "67f34f093c0f7bf33f5b4ae64d3d695a3b978285",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "7b8c7bd2296e95b38a6ff346242356a2e7190239",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "cca330c59c54207567a648357835f59df9a286bb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "79f988d3ffc1aa778fc5181bdfab312e57956c6b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "4ee0941da10e8fdcdb34756b877efd3282594c1f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "1fe60ee709436550f8cfbab01295936b868d5baa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "38762a0763c10c24a4915feee722d7aa6e73eb98",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/firewire/nosy.c"
    ],
    "versions": [
      {
        "version": "4.19.314",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.276",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.217",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.159",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.91",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.31",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f
git	www.git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb
git	www.git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa
git	www.git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239
git	www.git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285
git	www.git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b
git	www.git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c
git	www.git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 May 2024 10:29Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.0004