CVE-2024-47670

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47670
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f Patch
https://git.kernel.org/stable/c/1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 Patch
https://git.kernel.org/stable/c/8e7bef408261746c160853fc27df3139659f5f77 Patch
https://git.kernel.org/stable/c/9e3041fecdc8f78a5900c3aa51d3d756e73264d6 Patch
https://git.kernel.org/stable/c/34759b7e4493d7337cbc414c132cef378c492a2c Patch
https://git.kernel.org/stable/c/5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd Patch
https://git.kernel.org/stable/c/b49a786beb11ff740cb9e0c20b999c2a0e1729c2
https://git.kernel.org/stable/c/60c0d36189bad58b1a8e69af8781d90009559ea1
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/b49a786beb11ff740cb9e0c20b999c2a0e1729c2 -
  • () https://git.kernel.org/stable/c/60c0d36189bad58b1a8e69af8781d90009559ea1 -

23 Oct 2024, 19:16

Type Values Removed Values Added
CWE CWE-787
References () https://git.kernel.org/stable/c/5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd - () https://git.kernel.org/stable/c/5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd - Patch
References () https://git.kernel.org/stable/c/34759b7e4493d7337cbc414c132cef378c492a2c - () https://git.kernel.org/stable/c/34759b7e4493d7337cbc414c132cef378c492a2c - Patch
References () https://git.kernel.org/stable/c/1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 - () https://git.kernel.org/stable/c/1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 - Patch
References () https://git.kernel.org/stable/c/8e7bef408261746c160853fc27df3139659f5f77 - () https://git.kernel.org/stable/c/8e7bef408261746c160853fc27df3139659f5f77 - Patch
References () https://git.kernel.org/stable/c/9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f - () https://git.kernel.org/stable/c/9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f - Patch
References () https://git.kernel.org/stable/c/9e3041fecdc8f78a5900c3aa51d3d756e73264d6 - () https://git.kernel.org/stable/c/9e3041fecdc8f78a5900c3aa51d3d756e73264d6 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

17 Oct 2024, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd -
  • () https://git.kernel.org/stable/c/34759b7e4493d7337cbc414c132cef378c492a2c -

09 Oct 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-09 15:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-47670

Mitre link : CVE-2024-47670

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write