Executive Summary

Informations
Name CVE-2024-50247 First vendor Publication 2024-11-09
Vendor Cve Last vendor Modification 2024-11-13

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Overall CVSS Score 7.1
Base Score 7.1 Environmental Score 7.1
impact SubScore 5.2 Temporal Score 7.1
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Check if more than chunk-size bytes are written

A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50247

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-125 Out-of-bounds Read

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3638

Sources (Detail)

https://git.kernel.org/stable/c/1b6bc5f7212181093b6c5310eea216fc09c721a9
https://git.kernel.org/stable/c/4a4727bc582832f354e0d3d49838a401a28ae25e
https://git.kernel.org/stable/c/5f21e3e60982cd7353998b4f59f052134fd47d64
https://git.kernel.org/stable/c/9931122d04c6d431b2c11b5bb7b10f28584067f0
https://git.kernel.org/stable/c/e5ae7859008688626b4d2fa6139eeaa08e255053
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
Date Informations
2024-11-22 00:22:52
  • Multiple Updates
2024-11-20 00:20:40
  • Multiple Updates
2024-11-14 00:20:34
  • Multiple Updates
2024-11-13 21:20:36
  • Multiple Updates
2024-11-12 21:16:51
  • Multiple Updates
2024-11-09 17:27:29
  • First insertion