Lucene search

K
nvd[email protected]NVD:CVE-2024-20849
HistoryApr 02, 2024 - 3:15 a.m.

CVE-2024-20849

2024-04-0203:15:09
web.nvd.nist.gov
cve-2024-20849
chunk parsing implementation
arbitrary code
local attackers
smr apr-2023 release 1

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

EPSS

0

Percentile

9.0%

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-20849