Lucene search

Redhat.comRH:CVE-2024-30949

HistoryAug 20, 2024 - 3:40 p.m.

CVE-2024-30949

2024-08-2015:40:57

redhat.com

access.redhat.com

information security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.

References

bugzilla.redhat.com/show_bug.cgi?id=2306118

gist.github.com/visitorckw/6b26e599241ea80210ea136b28441661

inbox.sourceware.org/newlib/20231129035714.469943-1-visitorckw%40gmail.com/

nvd.nist.gov/vuln/detail/CVE-2024-30949

sourceware.org/git/?p=newlib-cygwin.git%3Ba=commit%3Bh=5f15d7c5817b07a6b18cbab17342c95cb7b42be4

www.cve.org/CVERecord?id=CVE-2024-30949

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

Related for RH:CVE-2024-30949