Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31025 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-09-06T20:12:31.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/no3586/CVE-2024-31025
CVE ID: CVE-2024-31029 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-23T17:09:56.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial of Service through specially crafted packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/keith-cullen/FreeCoAP/issues/36 - https://gist.github.com/dqp10515/41ec400b7eecfcae7578d505598ab85f
CVE ID: CVE-2024-31030 State: PUBLISHED Published: 2024-05-31T17:53:25.560Z Last Updated: 2025-02-13T15:47:51.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in coap_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentially disclose information via a specially crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keith-cullen/FreeCoAP/issues/36
CVE ID: CVE-2024-31031 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-11-04T22:06:11.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/obgm/libcoap/issues/1351 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYF
DAH7Q66KPYG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
CVE ID: CVE-2024-31032 State: PUBLISHED Published: 2024-03-29T00:00:00 Last Updated: 2024-08-22T18:26:57.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attacker to execute arbitrary code via the manager/ipping.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/whgojp/cve-reports/blob/master/Huashi_Private_Cloud_CDN_Live_Streaming_Acceleration_Server_Has_RCE_Vulnerability/report.md - https://github.com/walskt/CVE/blob/main/CVE-2024-31032/README.md
CVE ID: CVE-2024-31033 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-27T17:59:14.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey() method within the DefaultJwtParser class and the signWith() method within the DefaultJwtBuilder class. NOTE: the vendor disputes this because the "ignores" behavior cannot occur (in any version) unless there is a user error in how JJWT is used, and because the version that was actually tested must have been more than six years out of date. Additional Analyst
sed, and because the version that was actually tested must have been more than six years out of date. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jwtk/jjwt - https://www.viralpatel.net/java-create-validate-jwt-token/ - https://github.com/2308652512/JJWT_BUG - https://github.com/jwtk/jjwt/issues/930#issuecomment-2032699358
CVE ID: CVE-2024-31036 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T01:46:03.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nanomq/nanomq/issues/1722
CVE ID: CVE-2024-31040 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:04.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nanomq/nanomq/issues/1720
CVE ID: CVE-2024-31041 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-22T18:06:14.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nanomq/nanomq/issues/1723
CVE ID: CVE-2024-31047 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-08-02T01:46:04.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/issues/1680
CVE ID: CVE-2024-31061 State: PUBLISHED Published: 2024-03-28T00:00:00.000Z Last Updated: 2025-04-10T18:21:58.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/sahildari/cve/blob/master/CVE-2024-31061.md
CVE ID: CVE-2024-31062 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-02T01:46:03.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/sahildari/cve/blob/master/CVE-2024-31062.md
CVE ID: CVE-2024-31063 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-20T19:30:18.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/sahildari/cve/blob/master/CVE-2024-31063.md
CVE ID: CVE-2024-31064 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-10-30T16:12:44.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://sourcecodester.com - http://insurance.com - https://drive.google.com/file/d/1yTIeXAPs3PJcQwj9gxhvs92zTdBwKGVB/view?usp=sharing - https://github.com/sahildari/cve/blob/master/CVE-2024-31064.md
CVE ID: CVE-2024-31065 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-02T01:46:04.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/sahildari/cve/blob/master/CVE-2024-31065.md
CVE ID: CVE-2024-31068 State: PUBLISHED Published: 2025-02-12T21:20:23.660Z Last Updated: 2025-11-03T20:37:12.488Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: Denial of Service, CWE-1245 Description: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html
CVE ID: CVE-2024-31069 State: PUBLISHED Published: 2024-04-12T15:18:39.220Z Last Updated: 2024-08-02T01:46:04.573Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IOSiX Products: IO-1020 Micro ELD Problem Types: CWE-1392 Description: IO-1020 Micro ELD web server uses a default password for authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-093-01
CVE ID: CVE-2024-31070 State: PUBLISHED Published: 2024-07-17T08:47:22.506Z Last Updated: 2024-08-02T01:46:04.358Z Vendors: Century Systems Co., Ltd. Products: FutureNet NXR-1300 series, FutureNet NXR-650, FutureNet NXR-610X series, FutureNet NXR-530, FutureNet NXR-350/C, FutureNet NXR-230/C, FutureNet NXR-160/LW, FutureNet NXR-G200 series, FutureNet NXR-G180/L-CA, FutureNet NXR-G120 series, FutureNet NXR-G110 series, FutureNet NXR-G100 series, FutureNet NXR-G060 series, FutureNet NXR-G050 series, FutureNet VXR/x64, FutureNet VXR/x86, FutureNet NXR-1200, FutureNet NXR-130/C, FutureNet NXR-155/C series, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet WXR-250 Problem Types: Initialization
, FutureNet NXR-155/C series, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet WXR-250 Problem Types: Initialization of a Resource with an Insecure Default Description: Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html - https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html - https://jvn.jp/en/vu/JVNVU96424864/
CVE ID: CVE-2024-31071 State: PUBLISHED Published: 2024-07-02T08:13:30.953Z Last Updated: 2024-08-02T01:46:04.044Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-843 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md
CVE ID: CVE-2024-31073 State: PUBLISHED Published: 2025-05-13T21:02:59.235Z Last Updated: 2025-05-15T04:01:35.064Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Level Zero software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01274.html
CVE ID: CVE-2024-31074 State: PUBLISHED Published: 2024-11-13T21:11:00.898Z Last Updated: 2024-11-14T19:40:38.396Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) QAT Engine for OpenSSL software Problem Types: information disclosure, CWE-208 Description: Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html
CVE ID: CVE-2024-31076 State: PUBLISHED Published: 2024-06-21T10:18:04.335Z Last Updated: 2025-11-04T17:20:00.420Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next instance of the interrupt being triggered on the original CPU. When the interrupt next triggers on the original CPU, the new affinity is enforced within __irq_move_irq(). A vector is allocated from the new CPU, but the old vector on the orig
new affinity is enforced within __irq_move_irq(). A vector is allocated from the new CPU, but the old vector on the original CPU remains and is not immediately reclaimed. Instead, apicd->move_in_progress is flagged, and the reclaiming process is delayed until the next trigger of the interrupt on the new CPU. Upon the subsequent triggering of the interrupt on the new CPU, irq_complete_move() adds a task to the old CPU's vector_cleanup list if it remains online. Subsequently, the timer on the old CPU iterates over its vector_cleanup list, reclaiming old vectors. However, a rare scenario arises if the old CPU is outgoing before the interrupt triggers again on the new CPU. In that case irq_force
re scenario arises if the old CPU is outgoing before the interrupt triggers again on the new CPU. In that case irq_force_complete_move() is not invoked on the outgoing CPU to reclaim the old apicd->prev_vector because the interrupt isn't currently affine to the outgoing CPU, and irq_needs_fixup() returns false. Even though __vector_schedule_cleanup() is later called on the new CPU, it doesn't reclaim apicd->prev_vector; instead, it simply resets both apicd->move_in_progress and apicd->prev_vector to 0. As a result, the vector remains unreclaimed in vector_matrix, leading to a CPU vector leak. To address this issue, move the invocation of irq_force_complete_move() before the irq_needs_fixup()
a CPU vector leak. To address this issue, move the invocation of irq_force_complete_move() before the irq_needs_fixup() call to reclaim apicd->prev_vector, if the interrupt is currently or used to be affine to the outgoing CPU. Additionally, reclaim the vector in __vector_schedule_cleanup() as well, following a warning message, although theoretically it should never see apicd->move_in_progress with apicd->prev_cpu pointing to an offline CPU. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a40209d355afe4ed6d533507838c9e5cd70a76d8 - https://git.kernel.org/stable/c/f5f4675960609d8c5ee95f027fbf6ce380f98372 - https://git.k
fe4ed6d533507838c9e5cd70a76d8 - https://git.kernel.org/stable/c/f5f4675960609d8c5ee95f027fbf6ce380f98372 - https://git.kernel.org/stable/c/6752dfcfff3ac3e16625ebd3f0ad9630900e7e76 - https://git.kernel.org/stable/c/9eeda3e0071a329af1eba15f4e57dc39576bb420 - https://git.kernel.org/stable/c/e9c96d01d520498b169ce734a8ad1142bef86a30 - https://git.kernel.org/stable/c/59f86a2908380d09cdc726461c0fbb8d8579c99f - https://git.kernel.org/stable/c/ebfb16fc057a016abb46a9720a54abf0d4f6abe1 - https://git.kernel.org/stable/c/a6c11c0a5235fb144a65e0cb2ffd360ddc1f6c32
CVE ID: CVE-2024-31077 State: PUBLISHED Published: 2024-04-23T04:47:03.136Z Last Updated: 2024-08-02T01:46:04.186Z Vendors: WPMU DEV Products: Forminator Problem Types: SQL Injection Description: Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wordpress.org/plugins/forminator/ - https://wpmudev.com/ - https://jvn.jp/en/jp/JVN50132400/
CVE ID: CVE-2024-31078 State: PUBLISHED Published: 2024-05-07T06:27:02.835Z Last Updated: 2024-08-02T01:46:03.910Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-476 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md
CVE ID: CVE-2024-31079 State: PUBLISHED Published: 2024-05-29T16:02:04.620Z Last Updated: 2025-02-13T17:47:50.656Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: F5 Products: NGINX Open Source, NGINX Plus Problem Types: CWE-121 Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Ref
o visibility and limited influence over. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000139611 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/ - http://www.openwall.com/lists/oss-security/2024/05/30/4 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/
CVE ID: CVE-2024-31080 State: PUBLISHED Published: 2024-04-04T13:47:33.926Z Last Updated: 2025-11-20T07:18:58.383Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services fo
Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Problem Types: CWE-126 Description: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and se
ion. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ficant attempted out-of-bounds reads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1785 - https://access.redhat.com/errata/RHSA-2024:2036 - https://access.redhat.com/errata/RHSA-2024:2037 - https://access.redhat.com/errata/RHSA-2024:2038 - https://access.redhat.com/errata/RHSA-2024:2039 - https://access.redhat.com/errata/RHSA-2024:2040 - https://access.redhat.com/errata/RHSA-2024:2041 - https://access.redhat.com/errata/RHSA-2024:2042 - https://access.redhat.com/errata/RHSA-2024:2080 - https://access.redhat.com/errata/RHSA-2024:2616 - https://access.redhat.com/errata/RHSA-2024:3258 - https://access.redhat.
tps://access.redhat.com/errata/RHSA-2024:2616 - https://access.redhat.com/errata/RHSA-2024:3258 - https://access.redhat.com/errata/RHSA-2024:3261 - https://access.redhat.com/errata/RHSA-2024:3343 - https://access.redhat.com/errata/RHSA-2024:9093 - https://access.redhat.com/errata/RHSA-2024:9122 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/security/cve/CVE-2024-31080 - https://bugzilla.redhat.com/show_bug.cgi?id=2271997
CVE ID: CVE-2024-31081 State: PUBLISHED Published: 2024-04-04T13:48:12.848Z Last Updated: 2025-11-20T07:19:00.688Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services fo
Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Problem Types: CWE-126 Description: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and se
ion. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere