Lucene search

K
redhatcveRedhat.comRH:CVE-2024-22099
HistoryMar 04, 2024 - 5:27 p.m.

CVE-2024-22099

2024-03-0417:27:40
redhat.com
access.redhat.com
18
cve-2024-22099
overflow buffers
linux
x86
arm
rfcomm core
v2.6.12-rc2

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6.1

Confidence

High

EPSS

0

Percentile

5.1%

A NULL pointer dereference vulnerability was found in the Linux kernel in rfcomm_check_security. This issue may lead to buffer overflows.

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6.1

Confidence

High

EPSS

0

Percentile

5.1%