Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2024/10/21 3:46 p.m.9 views

SUSE CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

6CVSS6.3AI score0.00286EPSS
Exploits0References20
RedhatCVE
RedhatCVE
added 2024/10/21 2:42 p.m.25 views

CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.9AI score0.00286EPSS
Exploits0References4
OSV
OSV
added 2024/10/21 1:15 p.m.2 views

DEBIAN-CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.3AI score0.00286EPSS
Exploits0References1
NVD
NVD
added 2024/10/21 1:15 p.m.13 views

CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS0.00286EPSS
Exploits0References11
OSV
OSV
added 2024/10/21 1:15 p.m.8 views

AZL-50800 CVE-2024-47742 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.6AI score0.00286EPSS
Exploits0References1
CVE
CVE
added 2024/10/21 12:14 p.m.165 views

CVE-2024-47742

CVE-2024-47742 : Linux kernel firmware_loader path traversal vulnerability. Several code paths construct firmware filenames from device or userspace data (e.g., lpfc_sli4_request_firmware_update, nfp_net_fw_find, module_flash_fw_schedule). The issue arises when dynamic firmware names can include ...

7.8CVSS7.9AI score0.00286EPSS
Exploits0References11Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/21 12:14 p.m.12 views

CVE-2024-47742 firmware_loader: Block path traversal

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

6.8AI score0.00286EPSS
Exploits0References9
OSV
OSV
added 2024/10/21 12:14 p.m.14 views

CVE-2024-47742 firmware_loader: Block path traversal

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.3AI score0.00286EPSS
Exploits0References14
Rows per page
Query Builder