Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2024-38517
HistoryJul 10, 2024 - 12:51 a.m.

CVE-2024-38517

2024-07-1000:51:59
redhat.com
access.redhat.com
6
tencent rapidjson
integer underflow
privilege escalation
genericreader::parsenumber
json text
crafted file

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0

Percentile

15.8%

JSON

A flaw was found in the RapidJSON package. This flaw allows a local attacker to trigger an integer underflow via a specially crafted file, possibly leading to escalation of privileges.

Related

osv 1
mscve 1
cve 1
nessus 10
fedora 2
ubuntucve 1
vulnrichment 1
cbl_mariner 3
debiancve 1
openvas 7
alpinelinux 1
nvd 1
cvelist 1
mskb 7
kaspersky 1
rapid7blog 1
osv
osv
CVE-2024-38517
2024-07-09 19:15:12
mscve
mscve
Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability
2024-07-09 07:00:00
cve
cve
CVE-2024-38517
2024-07-09 19:15:12
nessus
nessus
Fedora 40 : rapidjson (2024-fb1e912d0e)
2024-07-25 00:00:00
Fedora 39 : rapidjson (2024-a3c1b2629e)
2024-07-25 00:00:00
Amazon Linux 2023 : rapidjson-devel (ALAS2023-2024-684)
2024-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: rapidjson-1.1.0-41.fc40
2024-07-19 01:46:41
[SECURITY] Fedora 39 Update: rapidjson-1.1.0-41.fc39
2024-07-19 02:22:03
ubuntucve
ubuntucve
CVE-2024-38517
2024-07-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow
2024-07-09 18:51:50
cbl_mariner
cbl_mariner
CVE-2024-38517 affecting package ceph for versions less than 16.2.10-5
2024-07-18 16:30:05
CVE-2024-38517 affecting package rapidjson for versions less than 1.1.0-8
2024-07-23 08:38:53
CVE-2024-38517 affecting package rapidjson for versions less than 1.1.0-8
2024-07-24 01:52:07
debiancve
debiancve
CVE-2024-38517
2024-07-09 19:15:12
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-fb1e912d0e)
2024-08-06 00:00:00
Fedora: Security Advisory (FEDORA-2024-a3c1b2629e)
2024-08-06 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5040427)
2024-07-10 00:00:00
alpinelinux
alpinelinux
CVE-2024-38517
2024-07-09 19:15:12
nvd
nvd
CVE-2024-38517
2024-07-09 19:15:12
cvelist
cvelist
CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow
2024-07-09 18:51:50
mskb
mskb
July 9, 2024—KB5040427 (OS Builds 19044.4651 and 19045.4651)
2024-08-13 07:00:00
July 9, 2024—KB5040431 (OS Build 22000.3079)
2024-08-13 07:00:00
July 9, 2024—KB5040442 (OS Builds 22621.3880 and 22631.3880)
2024-09-10 07:00:00
kaspersky
kaspersky
KLA70416 Multiple vulnerabilities in Microsoft Windows
2024-07-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - July 2024
2024-07-09 20:03:58

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0

Percentile

15.8%

JSON
Related for RH:CVE-2024-38517
osv1mscve1cve1nessus10fedora2ubuntucve1vulnrichment1cbl_mariner3debiancve1openvas7alpinelinux1nvd1cvelist1mskb7kaspersky1rapid7blog1