CVE-2024-38517

🗓️ 10 Jul 2024 00:51:59Reported by redhat.comType

Tencent RapidJSON integer underflow privilege escalation vulnerability in GenericReader::ParseNumber function when parsing JSON text from a crafted fil

Reporter	Title	Published	Views	Family All 68
Tenable Nessus	Amazon Linux 2023 : rapidjson-devel (ALAS2023-2024-684)	6 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 41 : rapidjson (2024-5e0da8577a)	14 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 39 : rapidjson (2024-a3c1b2629e)	25 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 40 : rapidjson (2024-fb1e912d0e)	25 Jul 202400:00	–	nessus
Tenable Nessus	KB5040427: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040430: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040431: Windows 11 version 21H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040434: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040437: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040438: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-38517
github	www.github.com/Tencent/rapidjson/pull/1261/commits/8269bc2bc289e9d343bae51cdf6d23ef0950e001
github	www.github.com/fmalita/rapidjson/commit/8269bc2bc289e9d343bae51cdf6d23ef0950e001
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38517
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

14 Oct 2024 16:25Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

EPSS0.00088

CWE-191