Lucene search

K
osvGoogleOSV:CVE-2024-6714
HistoryJul 23, 2024 - 4:15 p.m.

CVE-2024-6714

2024-07-2316:15:06
Google
osv.dev
setuid binary escalation
local attacker
privilege escalation
provd vulnerability

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

16.1%

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

16.1%