Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36443 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-08-22T23:03:12.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-036.txt
CVE ID: CVE-2024-36444 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-08-26T14:13:09.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-040.txt
CVE ID: CVE-2024-36445 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-08-22T23:03:15.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-035.txt
CVE ID: CVE-2024-36446 State: PUBLISHED Published: 2024-08-13T00:00:00.000Z Last Updated: 2025-03-25T16:20:46.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access control. A successful exploit could allow an attacker to bypass the authorization schema. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0017
CVE ID: CVE-2024-36448 State: PUBLISHED Published: 2024-08-05T09:53:38.194Z Last Updated: 2025-03-13T14:22:04.554Z Vendors: Apache Software Foundation Products: Apache IoTDB Workbench Problem Types: CWE-918 Description: ** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench. This issue affects Apache IoTDB Workbench: from 0.13.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP
vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/d19p0vsm7nogp43q9m3tzm5jl6mzjj1x
CVE ID: CVE-2024-36450 State: PUBLISHED Published: 2024-07-10T07:01:07.082Z Last Updated: 2025-03-13T14:38:27.167Z Vendors: Webmin Products: Webmin Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.com/ - https://jvn.jp/en/jp/JVN81442045/
CVE ID: CVE-2024-36451 State: PUBLISHED Published: 2024-07-10T07:01:26.121Z Last Updated: 2024-08-02T03:37:05.144Z Vendors: Webmin Products: Webmin Problem Types: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.com/ - https://jvn.jp/
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.com/ - https://jvn.jp/en/jp/JVN81442045/
CVE ID: CVE-2024-36452 State: PUBLISHED Published: 2024-07-10T07:01:48.896Z Last Updated: 2024-11-05T21:12:24.776Z Vendors: Webmin Products: Webmin Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.com/ - https://jvn.jp/en/jp/JVN81442045/
CVE ID: CVE-2024-36453 State: PUBLISHED Published: 2024-07-10T07:02:17.776Z Last Updated: 2024-11-06T21:34:36.873Z Vendors: Webmin Products: Webmin, Usermin Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.
be disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://webmin.com/ - https://webmin.com/usermin/ - https://jvn.jp/en/jp/JVN81442045/
CVE ID: CVE-2024-36454 State: PUBLISHED Published: 2024-06-12T05:12:24.382Z Last Updated: 2024-08-02T03:37:05.198Z Vendors: Fsas Technologies Inc. Products: IPCOM EX2 Series (V01L0x Series), IPCOM VE2 Series Problem Types: Use of Uninitialized Resource Description: Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/ - https:
ment: - CVE Program Container: References: - https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/ - https://jvn.jp/en/jp/JVN25594256/
CVE ID: CVE-2024-36455 State: PUBLISHED Published: 2024-07-15T13:19:41.914Z Last Updated: 2024-08-02T03:37:05.159Z Vendors: Broadcom Products: Symantec Privileged Access Management Description: An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE ID: CVE-2024-36456 State: PUBLISHED Published: 2024-07-15T13:31:44.145Z Last Updated: 2024-08-02T03:37:05.337Z Vendors: Broadcom Products: Symantec Privileged Access Management Description: This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE ID: CVE-2024-36457 State: PUBLISHED Published: 2024-07-15T13:39:19.248Z Last Updated: 2024-11-12T18:12:40.781Z Vendors: Broadcom Products: Symantec Privileged Access Management Description: The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE ID: CVE-2024-36458 State: PUBLISHED Published: 2024-07-15T13:43:53.687Z Last Updated: 2024-11-21T20:55:17.095Z Vendors: Broadcom Products: Symantec Privileged Access Management Description: The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE ID: CVE-2024-36459 State: PUBLISHED Published: 2024-06-14T12:06:19.298Z Last Updated: 2024-08-02T03:37:05.267Z Vendors: Broadcom Products: Symantec SiteMinder Description: A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24537 - https://datatracker.ietf.org/doc/html/rfc6265#section
ntent-notification/-/external/content/SecurityAdvisories/0/24537 - https://datatracker.ietf.org/doc/html/rfc6265#section-4.1.1
CVE ID: CVE-2024-36460 State: PUBLISHED Published: 2024-08-09T09:28:12.887Z Last Updated: 2025-11-03T21:55:11.809Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-256 Description: The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25017
CVE ID: CVE-2024-36461 State: PUBLISHED Published: 2024-08-09T09:33:39.885Z Last Updated: 2025-11-03T21:55:13.273Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-822 Description: Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25018
CVE ID: CVE-2024-36462 State: PUBLISHED Published: 2024-08-09T09:40:33.302Z Last Updated: 2024-08-12T15:44:18.989Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-770 Description: Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls. This can cause a denial-of-service (DoS) attack or degrade the performance of the affected system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25019
CVE ID: CVE-2024-36463 State: PUBLISHED Published: 2024-11-26T15:06:14.217Z Last Updated: 2024-11-26T16:21:54.142Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-767 Description: The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25611
CVE ID: CVE-2024-36464 State: PUBLISHED Published: 2024-11-27T14:01:58.136Z Last Updated: 2025-11-03T21:55:14.745Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-256 Description: When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25630
CVE ID: CVE-2024-36465 State: PUBLISHED Published: 2025-04-02T06:11:26.928Z Last Updated: 2025-04-02T15:09:28.836Z Vendors: Zabbix Products: Zabbix Problem Types: CWE-89 Description: A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-26257
CVE ID: CVE-2024-36466 State: PUBLISHED Published: 2024-11-28T07:19:48.806Z Last Updated: 2024-12-04T14:38:41.930Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-290 Description: A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25635
CVE ID: CVE-2024-36467 State: PUBLISHED Published: 2024-11-27T06:16:30.381Z Last Updated: 2024-12-04T14:36:54.043Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-285 Description: An authenticated user with API access (e.g.: user with default User role), more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group (e.g.: Zabbix Administrators), except to groups that are disabled or having restricted GUI access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25614
CVE ID: CVE-2024-36468 State: PUBLISHED Published: 2024-11-27T12:03:07.626Z Last Updated: 2024-11-27T14:57:32.411Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-121 Description: The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25621
CVE ID: CVE-2024-36469 State: PUBLISHED Published: 2025-04-02T06:11:55.000Z Last Updated: 2025-11-03T19:30:06.293Z Vendors: Zabbix Products: Zabbix Problem Types: CWE-208 Description: Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-26255
CVE ID: CVE-2024-36470 State: PUBLISHED Published: 2024-05-29T13:29:07.173Z Last Updated: 2024-08-02T03:37:05.191Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: JetBrains Products: TeamCity Problem Types: CWE-288 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36471 State: PUBLISHED Published: 2024-06-10T21:55:06.170Z Last Updated: 2024-09-13T16:03:21.981Z Vendors: Apache Software Foundation Products: Apache Allura Problem Types: CWE-20, CWE-200, CWE-918 Description: Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL. Project administrators can run these imports, which could cause Allura to read from internal services and expose them. This issue affects Apache Allura from 1.0.1 through 1.16.0. Users are recommended to upgrade to version 1.17.0, which fixes the issue. If you are unable to upgrade, set "disable_entry_points.allura.importers = forge-tracker, forge-discussion" in
he issue. If you are unable to upgrade, set "disable_entry_points.allura.importers = forge-tracker, forge-discussion" in your .ini config file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/g43164t4bcp0tjwt4opxyks4svm8kvbh
CVE ID: CVE-2024-36472 State: PUBLISHED Published: 2024-05-28T16:05:39.192Z Last Updated: 2025-02-13T15:59:21.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/7688
CVE ID: CVE-2024-36473 State: PUBLISHED Published: 2024-06-10T21:22:16.960Z Last Updated: 2025-03-28T23:46:05.938Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro VPN Proxy One Pro Description: Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under specific conditions can lead to elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-07247 - https://www.zerodayinitiative.com/advisories/Z
eferences: - https://helpcenter.trendmicro.com/en-us/article/tmka-07247 - https://www.zerodayinitiative.com/advisories/ZDI-24-585/
CVE ID: CVE-2024-36474 State: PUBLISHED Published: 2024-10-03T15:24:46.204Z Last Updated: 2025-11-03T21:55:16.222Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GNOME Project Products: G Structured File Library (libgsf) Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacke
t-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2068 - https://gitlab.gnome.org/GNOME/libgsf/-/issues/34
CVE ID: CVE-2024-36475 State: PUBLISHED Published: 2024-07-17T08:48:33.524Z Last Updated: 2024-08-02T03:37:05.246Z Vendors: Century Systems Co., Ltd. Products: FutureNet NXR-1300 series, FutureNet NXR-650, FutureNet NXR-610X series, FutureNet NXR-530, FutureNet NXR-350/C, FutureNet NXR-230/C, FutureNet NXR-160/LW, FutureNet NXR-G200 series, FutureNet NXR-G180/L-CA, FutureNet NXR-G120 series, FutureNet NXR-G110 series, FutureNet NXR-G100 series, FutureNet NXR-G060 series, FutureNet NXR-G050 series, FutureNet VXR/x64, FutureNet VXR/x86, FutureNet NXR-1200, FutureNet NXR-130/C, FutureNet NXR-155/C series, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet WXR-250 Problem Types: Active debug c
, FutureNet NXR-155/C series, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet WXR-250 Problem Types: Active debug code Description: FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html - https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html - https://jvn.jp/en/vu/JVNVU96424864/
CVE ID: CVE-2024-36476 State: PUBLISHED Published: 2025-01-15T13:10:20.507Z Last Updated: 2025-11-03T20:37:45.505Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move the declaration of the 'ib_sge list' variable outside the 'always_invalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ib_sge list' was declared within the 'always_invalidate' block, limiting its accessibility, then caused a 'BUG: kernel NULL pointer dereference'[1]. ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2d0 ? search_module_extables+0x19/0x60 ? search_bpf_extab
nce'[1]. ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2d0 ? search_module_extables+0x19/0x60 ? search_bpf_extables+0x5f/0x80 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? memcpy_orig+0xd5/0x140 rxe_mr_copy+0x1c3/0x200 [rdma_rxe] ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe] copy_data+0xa5/0x230 [rdma_rxe] rxe_requester+0xd9b/0xf70 [rdma_rxe] ? finish_task_switch.isra.0+0x99/0x2e0 rxe_sender+0x13/0x40 [rdma_rxe] do_task+0x68/0x1e0 [rdma_rxe] process_one_work+0x177/0x330 worker_thread+0x252/0x390 ? __pfx_worker_thread+0x10/0x10 This change ensures the variable is available for subsequent operations that require it. [1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-b
able is available for subsequent operations that require it. [1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7eaa71f56a6f7ab87957213472dc6d4055862722 - https://git.kernel.org/stable/c/143378075904e78b3b2a810099bcc3b3d82d762f - https://git.kernel.org/stable/c/32e1e748a85bd52b20b3857d80fd166d22fa455a - https://git.kernel.org/stable/c/b238f61cc394d5fef27b26d7d9aa383ebfddabb0 - https://git.kernel.org/stable/c/6ffb5c1885195ae5211a12b4acd2d51843ca41b0 - https://git.kernel.org/stable/c/fb514b31395946022f13a08e06a435f53cf9e8b3
CVE ID: CVE-2024-36477 State: PUBLISHED Published: 2024-06-21T11:18:46.822Z Last Updated: 2025-05-04T09:11:06.625Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAX_SPI_FRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account for the 4 bytes of header that prepends the SPI data frame. This can result in out-of-bounds accesses and was confirmed with KASAN. Introduce SPI_HDRSIZE to account for the header and use to allocate the transfer buffer. Additional Analyst
with KASAN. Introduce SPI_HDRSIZE to account for the header and use to allocate the transfer buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1547183852dcdfcc25878db7dd3620509217b0cd - https://git.kernel.org/stable/c/de13c56f99477b56980c7e00b09c776d16b7563d - https://git.kernel.org/stable/c/195aba96b854dd664768f382cd1db375d8181f88