Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-39248 State: PUBLISHED Published: 2024-07-03T00:00:00.000Z Last Updated: 2025-03-18T15:01:39.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field at /admin.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/files/179219 - https://github.com/jasonthename/CVE-2024-39248
CVE ID: CVE-2024-39249 State: PUBLISHED Published: 2024-07-01T00:00:00 Last Updated: 2024-08-26T14:46:02.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function. NOTE: this is disputed by the supplier because there is no realistic threat model: regular expressions are not used with untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/caolan/async/blob/v3.2.5/lib/autoInject.js#L6 - https://github.com/caolan/async/blob/v3.2.5/lib/autoInject.js#L41 - https://github.com/zunak/CVE-2
ib/autoInject.js#L6 - https://github.com/caolan/async/blob/v3.2.5/lib/autoInject.js#L41 - https://github.com/zunak/CVE-2024-39249 - https://github.com/zunak/CVE-2024-39249/issues/1 - https://github.com/caolan/async/issues/1975#issuecomment-2204528153
CVE ID: CVE-2024-39250 State: PUBLISHED Published: 2024-07-22T00:00:00 Last Updated: 2024-08-02T04:19:20.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/efrann/CVE-2024-39250
CVE ID: CVE-2024-39251 State: PUBLISHED Published: 2024-07-01T00:00:00.000Z Last Updated: 2025-03-13T15:18:10.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center
CVE ID: CVE-2024-39271 State: PUBLISHED Published: 2025-02-12T21:20:11.056Z Last Updated: 2025-02-13T19:46:30.134Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software Problem Types: Information Disclosure, CWE-923 Description: Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/a
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE ID: CVE-2024-39272 State: PUBLISHED Published: 2025-02-06T16:47:29.134Z Last Updated: 2025-02-12T19:51:09.249Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: ClearML Products: ClearML Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2110
CVE ID: CVE-2024-39273 State: PUBLISHED Published: 2025-01-14T14:21:23.397Z Last Updated: 2025-01-15T20:57:19.792Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-306 Description: A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2037
CVE ID: CVE-2024-39274 State: PUBLISHED Published: 2024-08-01T14:05:02.518Z Last Updated: 2024-08-02T15:10:58.701Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to properly validate that the channel that comes from the sync message is a shared channel, when shared channels are enabled, which allows a malicious remote to add users to arbitrary teams and channels Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39275 State: PUBLISHED Published: 2024-09-27T17:38:20.408Z Last Updated: 2024-09-27T18:14:05.172Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Advantech Products: ADAM-5630 Problem Types: CWE-539 Description: Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was terminated, allows an unauthorized attacker to act with the same level of privileges of the legitimate user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-02
CVE ID: CVE-2024-39276 State: PUBLISHED Published: 2024-06-25T14:22:38.886Z Last Updated: 2025-05-04T12:56:59.037Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mb_cache_destroy+0x224/0x290 Modules linked in: CPU: 0 PID: 5075 Comm: syz-executor199 Not tainted 6.9.0-rc6-gb947cc5bf6d7 RIP: 0010:mb_cache_destroy+0x224/0x290 fs/mbcache.c:419 Call Trace: <TASK> ext4_put_super+0x6d4/0xcd0 fs/ext4/super.c:1375 generic_shutdown_super+0x
x224/0x290 fs/mbcache.c:419 Call Trace: <TASK> ext4_put_super+0x6d4/0xcd0 fs/ext4/super.c:1375 generic_shutdown_super+0x136/0x2d0 fs/super.c:641 kill_block_super+0x44/0x90 fs/super.c:1675 ext4_kill_sb+0x68/0xa0 fs/ext4/super.c:7327 [...] ============================================ This is because when finding an entry in ext4_xattr_block_cache_find(), if ext4_sb_bread() returns -ENOMEM, the ce's e_refcnt, which has already grown in the __entry_find(), won't be put away, and eventually trigger the above issue in mb_cache_destroy() due to reference count leakage. So call mb_cache_entry_put() on the -ENOMEM error branch as a quick fix. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
cache_entry_put() on the -ENOMEM error branch as a quick fix. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9ad75e78747b5a50dc5a52f0f8e92e920a653f16 - https://git.kernel.org/stable/c/896a7e7d0d555ad8b2b46af0c2fa7de7467f9483 - https://git.kernel.org/stable/c/76dc776153a47372719d664e0fc50d6355791abb - https://git.kernel.org/stable/c/681ff9a09accd8a4379f8bd30b7a1641ee19bb3e - https://git.kernel.org/stable/c/e941b712e758f615d311946bf98216e79145ccd9 - https://git.kernel.org/stable/c/a95df6f04f2c37291adf26a74205cde0314d4577 - https://git.kernel.org/stable/c/b37c0edef4e66fb21a2fbc211471195a383e5ab8 - https://git.kernel.org/
6a74205cde0314d4577 - https://git.kernel.org/stable/c/b37c0edef4e66fb21a2fbc211471195a383e5ab8 - https://git.kernel.org/stable/c/0c0b4a49d3e7f49690a6827a41faeffad5df7e21
CVE ID: CVE-2024-39277 State: PUBLISHED Published: 2024-06-21T11:15:13.559Z Last Updated: 2025-05-04T09:16:07.465Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMA_NO_NODE correctly cpumask_of_node() can be called for NUMA_NO_NODE inside do_map_benchmark() resulting in the following sanitizer report: UBSAN: array-index-out-of-bounds in ./arch/x86/include/asm/topology.h:72:28 index -1 is out of range for type 'cpumask [64][1]' CPU: 1 PID: 990 Comm: dma_map_benchma Not tainted 6.9.0-rc6 #29 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:1
.9.0-rc6 #29 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:117) ubsan_epilogue (lib/ubsan.c:232) __ubsan_handle_out_of_bounds (lib/ubsan.c:429) cpumask_of_node (arch/x86/include/asm/topology.h:72) [inline] do_map_benchmark (kernel/dma/map_benchmark.c:104) map_benchmark_ioctl (kernel/dma/map_benchmark.c:246) full_proxy_unlocked_ioctl (fs/debugfs/file.c:333) __x64_sys_ioctl (fs/ioctl.c:890) do_syscall_64 (arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) Use cpumask_of_node() in place when binding a kernel thread to a cpuset of a particular node. Note that the provided node id is checked inside
in place when binding a kernel thread to a cpuset of a particular node. Note that the provided node id is checked inside map_benchmark_ioctl(). It's just a NUMA_NO_NODE case which is not handled properly later. Found by Linux Verification Center (linuxtesting.org). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b41b0018e8ca06e985e87220a618ec633988fd13 - https://git.kernel.org/stable/c/8e1ba9df9a35e8dc64f657a64e523c79ba01e464 - https://git.kernel.org/stable/c/5a91116b003175302f2e6ad94b76fb9b5a141a41 - https://git.kernel.org/stable/c/50ee21bfc005e69f183d6b4b454e33f0c2571e1f - https://git.kernel.org/stable/c/e64746e74f71
https://git.kernel.org/stable/c/50ee21bfc005e69f183d6b4b454e33f0c2571e1f - https://git.kernel.org/stable/c/e64746e74f717961250a155e14c156616fcd981f
CVE ID: CVE-2024-39278 State: PUBLISHED Published: 2024-09-05T22:39:30.138Z Last Updated: 2024-09-06T13:26:53.933Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Hughes Network Systems Products: WL3000 Fusion Software Problem Types: CWE-522 Description: Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-249-01
CVE ID: CVE-2024-39279 State: PUBLISHED Published: 2025-02-12T21:19:32.977Z Last Updated: 2025-11-03T20:38:12.803Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) processors Problem Types: Denial of Service, CWE-1220 Description: Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
CVE ID: CVE-2024-39280 State: PUBLISHED Published: 2025-01-14T14:20:58.776Z Last Updated: 2025-01-14T20:52:48.000Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-15 Description: An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2055
CVE ID: CVE-2024-39281 State: PUBLISHED Published: 2024-11-12T15:01:57.151Z Last Updated: 2025-01-10T13:06:46.829Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-20 Description: The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:18.ctl.asc
CVE ID: CVE-2024-39282 State: PUBLISHED Published: 2025-01-15T13:10:21.320Z Last Updated: 2025-11-03T20:38:14.199Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released. BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0
released. BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]--- U
kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]--- Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/ Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/b8ab9bd0c8855cd5a6f4e0265083576257ff3fc5 - https://git.kernel.org/stable/c/0cd3bde081cd3452c875fa1e5c55834c670d6e05 - https://git.kernel.org/stable/c/e6e6882a1590cbdaca77a31a02f4954327237e14 - https://git.kernel.org/stable/c/4f619d518db9cd1a933c3a095a5f95d0c1584ae8
CVE ID: CVE-2024-39283 State: PUBLISHED Published: 2024-08-14T13:45:39.501Z Last Updated: 2024-08-14T18:00:36.712Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) TDX module software Problem Types: escalation of privilege, CWE-791 Description: Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01010.html
CVE ID: CVE-2024-39284 State: PUBLISHED Published: 2025-02-12T21:19:04.389Z Last Updated: 2025-02-13T20:19:50.701Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Advisor software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01208.html
CVE ID: CVE-2024-39285 State: PUBLISHED Published: 2024-11-13T21:10:54.272Z Last Updated: 2024-11-14T19:41:35.295Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Server M20NTP Family Problem Types: information disclosure, CWE-284 Description: Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE ID: CVE-2024-39286 State: PUBLISHED Published: 2025-02-12T21:18:59.246Z Last Updated: 2025-08-27T21:20:11.841Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) 800 Series Ethernet Driver Problem Types: Information Disclosure, CWE-279 Description: Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01236.html
CVE ID: CVE-2024-39287 State: PUBLISHED Published: 2024-08-08T17:25:04.027Z Last Updated: 2024-08-08T18:08:03.552Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dorsett Controls Products: InfoScan Problem Types: CWE-200 Description: Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains passwords and API keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01 - https://portal.dtscada.com/#/security-bulletins?bulletin=1
CVE ID: CVE-2024-39288 State: PUBLISHED Published: 2025-01-14T14:21:33.397Z Last Updated: 2025-01-15T21:11:49.152Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS
CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2021
CVE ID: CVE-2024-39289 State: PUBLISHED Published: 2025-07-17T19:11:07.080Z Last Updated: 2025-07-18T08:04:04.631Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Open Source Robotics Foundation Products: Robot Operating System (ROS) Problem Types: CWE-95, CWE-94 Description: A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval() function to process unsanitized, user-supplied parameter values via special converters for angle representations in radians. This flaw allowed attackers to craft and execute arbit
lues via special converters for angle representations in radians. This flaw allowed attackers to craft and execute arbitrary Python code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ros.org/blog/noetic-eol/
CVE ID: CVE-2024-39290 State: PUBLISHED Published: 2024-11-22T00:11:56.742Z Last Updated: 2024-11-22T11:34:09.606Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: AIPHONE CO., LTD. Products: IX-MV, IX-MV7-HB, IX-MV7-HBT, IX-MV7-HW, IX-MV7-HWT, IX-MV7-HW-JP, IX-MV7-B, IX-MV7-BT, IX-MV7-W, IX-MV7-WT, IX-DA, IX-DAU, IX-DB, IX-DBT, IX-EA, IX-EAT, IX-EAU, IX-DV, IX-DVT, IX-DVF, IX-DVF-P, IX-DVF-L, IX-DVM, IX-DU, IX-DVF-RA, IX-DVF-2RA, IX-BA, IX-BAU, IX-BB, IX-BBT, IX-FA, IX-SSA, IX-SS-2G, IX-SS-2GT, IX-SS-2G-N, IX-BU, IX-SSA-RA, IX-SSA-2RA, IX-RS-B, IX-RS-BT, IX-RS-W, IX-RS-WT, IXW-MA, IX-SPMIC, IXG-2C7, IXG-2C7-L, IXG-DM7, IXG-DM7-HID, IXG-DM7-HIDA, IXG-DM7-10K,
S-B, IX-RS-BT, IX-RS-W, IX-RS-WT, IXW-MA, IX-SPMIC, IXG-2C7, IXG-2C7-L, IXG-DM7, IXG-DM7-HID, IXG-DM7-HIDA, IXG-DM7-10K, IXG-MK, IXGW-GW, IXGW-TGW, IXGW-LC Problem Types: CWE-522 Description: Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.aiphone.net/important/20241016_1/ - https://www.aiphone.net/important/20241016_2/ - https://www.aiphone.net/support/software-documents/ix/ - https://www.aiphone.net/support/software-documents/ixg/ - https://jvn
//www.aiphone.net/support/software-documents/ix/ - https://www.aiphone.net/support/software-documents/ixg/ - https://jvn.jp/en/jp/JVN41397971/
CVE ID: CVE-2024-39291 State: PUBLISHED Published: 2024-06-24T13:52:26.082Z Last Updated: 2025-05-04T09:16:09.673Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() The function gfx_v9_4_3_init_microcode in gfx_v9_4_3.c was generating about potential truncation of output when using the snprintf function. The issue was due to the size of the buffer 'ucode_prefix' being too small to accommodate the maximum possible length of the string being written into it. The string being written is "amdgpu/%s_mec.bin" or "amdgpu/%s_rlc.bin", where %s is re
the string being written into it. The string being written is "amdgpu/%s_mec.bin" or "amdgpu/%s_rlc.bin", where %s is replaced by the value of 'chip_name'. The length of this string without the %s is 16 characters. The warning message indicated that 'chip_name' could be up to 29 characters long, resulting in a total of 45 characters, which exceeds the buffer size of 30 characters. To resolve this issue, the size of the 'ucode_prefix' buffer has been reduced from 30 to 15. This ensures that the maximum possible length of the string being written into the buffer will not exceed its size, thus preventing potential buffer overflow and truncation issues. Fixes the below with gcc W=1: drivers/gpu/
ed its size, thus preventing potential buffer overflow and truncation issues. Fixes the below with gcc W=1: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c: In function ‘gfx_v9_4_3_early_init’: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=] 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin", chip_name); | ^~ ...... 439 | r = gfx_v9_4_3_init_rlc_microcode(adev, ucode_prefix); | ~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin"