Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2024-43839 First vendor Publication 2024-08-17
Vendor Cve Last vendor Modification 2024-10-30

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 7.8
Base Score 7.8 Environmental Score 7.8
impact SubScore 5.9 Temporal Score 7.8
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there.

For '%d' specifiers, assume that they require:
* 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8
* 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX
is 16

And replace sprintf with snprintf.

Detected using the static analysis tool - Svace.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-787 Out-of-bounds Write (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3668

Sources (Detail)

https://git.kernel.org/stable/c/6ce46045f9b90d952602e2c0b8886cfadf860bf1
https://git.kernel.org/stable/c/6d20c4044ab4d0e6a99aa35853e66f0aed5589e3
https://git.kernel.org/stable/c/ab748dd10d8742561f2980fea08ffb4f0cacfdef
https://git.kernel.org/stable/c/b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43
https://git.kernel.org/stable/c/c90b1cd7758fd4839909e838ae195d19f8065d76
https://git.kernel.org/stable/c/c9741a03dc8e491e57b95fba0058ab46b7e506da
https://git.kernel.org/stable/c/e0f48f51d55fb187400e9787192eda09fa200ff5
https://git.kernel.org/stable/c/f121740f69eda4da2de9a20a6687a13593e72540
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Date Informations
2025-03-29 03:39:32
  • Multiple Updates
2025-03-28 13:44:12
  • Multiple Updates
2025-03-28 03:17:48
  • Multiple Updates
2025-03-19 03:13:11
  • Multiple Updates
2025-03-18 03:26:06
  • Multiple Updates
2025-03-14 03:13:24
  • Multiple Updates
2025-03-06 14:09:55
  • Multiple Updates
2025-02-22 03:23:27
  • Multiple Updates
2025-01-08 03:04:32
  • Multiple Updates
2025-01-07 03:04:05
  • Multiple Updates
2024-12-25 03:02:43
  • Multiple Updates
2024-12-12 03:05:40
  • Multiple Updates
2024-11-23 03:02:42
  • Multiple Updates
2024-11-22 03:00:53
  • Multiple Updates
2024-11-20 02:59:13
  • Multiple Updates
2024-11-14 02:59:31
  • Multiple Updates
2024-11-09 02:59:32
  • Multiple Updates
2024-10-31 00:28:11
  • Multiple Updates
2024-08-19 13:27:29
  • Multiple Updates
2024-08-17 17:27:28
  • First insertion