Lucene search

K
nvd[email protected]NVD:CVE-2024-20833
HistoryMar 05, 2024 - 8:15 a.m.

CVE-2024-20833

2024-03-0508:15:39
web.nvd.nist.gov
3
vulnerability
pub_crypto_recv_msg
smr mar-2024
memory corruption
race condition
local attackers
system privilege

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

4.7

Confidence

High

EPSS

0

Percentile

9.0%

Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

4.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-20833