Executive Summary

Informations
Name CVE-2024-44944 First vendor Publication 2024-08-30
Vendor Cve Last vendor Modification 2024-09-10

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ctnetlink: use helper function to calculate expect ID

Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44944

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-401 Failure to Release Memory Before Removing Last Reference ('Memory Leak')

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3645

Sources (Detail)

https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39
https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd
https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61
https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435
https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450
https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8f
https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299
https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184
https://www.zerodayinitiative.com/advisories/ZDI-24-1182/
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
Date Informations
2025-01-08 03:04:49
  • Multiple Updates
2025-01-07 03:04:22
  • Multiple Updates
2024-12-25 03:03:00
  • Multiple Updates
2024-12-12 03:05:56
  • Multiple Updates
2024-11-23 03:02:58
  • Multiple Updates
2024-11-22 03:01:09
  • Multiple Updates
2024-11-20 02:59:28
  • Multiple Updates
2024-11-14 02:59:47
  • Multiple Updates
2024-11-09 02:59:47
  • Multiple Updates
2024-10-26 02:57:09
  • Multiple Updates
2024-10-25 02:59:02
  • Multiple Updates
2024-10-23 02:58:14
  • Multiple Updates
2024-10-03 02:53:30
  • Multiple Updates
2024-10-02 02:51:54
  • Multiple Updates
2024-09-14 21:29:54
  • Multiple Updates
2024-09-12 00:27:34
  • Multiple Updates
2024-09-10 13:27:33
  • Multiple Updates
2024-09-06 21:27:49
  • Multiple Updates
2024-09-06 00:27:32
  • Multiple Updates
2024-09-03 21:27:32
  • Multiple Updates
2024-08-30 17:27:26
  • Multiple Updates
2024-08-30 13:27:33
  • First insertion