CVE-2024-45063 Multiple issues in ctl(4) CAM Target Layer

🗓️ 05 Sep 2024 04:31:22Reported by freebsdType

Multiple issues in ctl(4) CAM Target Layer. ctl_write_buffer function sets incorrect flag leading to Use-After-Free. Vulnerabilities in virtio_scsi can achieve code execution on bhyve host process, usually running as root. iSCSI initiator can achieve remote code execution on the target host

Reporter	Title	Published	Views	Family All 11
FreeBSD	FreeBSD -- Multiple issues in ctl(4) CAM Target Layer	4 Sep 202400:00	–	freebsd
BDU FSTEC	The vulnerability of the ctl_write_buffer() function in the ctl subsystem of the FreeBSD operating system allows a hacker to execute arbitrary code.	25 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-45063	5 Sep 202407:59	–	circl
CNNVD	FreeBSD 资源管理错误漏洞	5 Sep 202400:00	–	cnnvd
CVE	CVE-2024-45063	5 Sep 202404:31	–	cve
FreeBSD Advisory	FreeBSD-SA-24:11.ctl	4 Sep 202400:00	–	freebsd_advisory
Tenable Nessus	FreeBSD : FreeBSD -- Multiple issues in ctl(4) CAM Target Layer (9bd5e47b-6b50-11ef-9a62-002590c1f29c)	6 Sep 202400:00	–	nessus
NVD	CVE-2024-45063	5 Sep 202405:15	–	nvd
OSV	CVE-2024-45063	5 Sep 202405:15	–	osv
Positive Technologies	PT-2024-8607 · Freebsd · Freebsd	4 Sep 202400:00	–	ptsecurity

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "ctl"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p4",
        "status": "affected",
        "version": "14.1-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p10",
        "status": "affected",
        "version": "14.0-RELEASE",
        "versionType": "release"
      },
      {
        "lessThan": "p6",
        "status": "affected",
        "version": "13.3-RELEASE",
        "versionType": "release"
      }
    ]
  }
]

Source	Link
security	www.security.freebsd.org/advisories/FreeBSD-SA-24:11.ctl.asc

05 Sep 2024 04:31Current

EPSS0.0689

CWE-416