Lucene search

Ubuntu.comUB:CVE-2024-31636

HistoryMay 03, 2024 - 12:00 a.m.

CVE-2024-31636

2024-05-0300:00:00

ubuntu.com

lief

v0.14.1

local attacker

sensitive information

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive
information via the name parameter of the machd_reader.c component.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlief< anyUNKNOWN
ubuntu22.04noarchlief< anyUNKNOWN
ubuntu23.10noarchlief< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	lief	< any	UNKNOWN
ubuntu	22.04	noarch	lief	< any	UNKNOWN
ubuntu	23.10	noarch	lief	< any	UNKNOWN

References

lief.com

github.com/lief-project/LIEF

launchpad.net/bugs/cve/CVE-2024-31636

nvd.nist.gov/vuln/detail/CVE-2024-31636

security-tracker.debian.org/tracker/CVE-2024-31636

www.cve.org/CVERecord?id=CVE-2024-31636