CVE-2024-42301
Huawei Linux Parport Stack-Based Buffer Overflow Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not overflowed. Below is the stack trace I encountered during the actual issue: [ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport] [ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm: QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2 [ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp [ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024 [ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace: [ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0 [ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20 [ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c [ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc [ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38 [ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]
INFO
Published Date :
Aug. 17, 2024, 9:15 a.m.
Last Modified :
Aug. 22, 2024, 4:31 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
5.9
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-42301.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-42301 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-42301 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Aug. 22, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://git.kernel.org/stable/c/166a0bddcc27de41fe13f861c8348e8e53e988c8 No Types Assigned https://git.kernel.org/stable/c/166a0bddcc27de41fe13f861c8348e8e53e988c8 Patch Changed Reference Type https://git.kernel.org/stable/c/47b3dce100778001cd76f7e9188944b5cb27a76d No Types Assigned https://git.kernel.org/stable/c/47b3dce100778001cd76f7e9188944b5cb27a76d Patch Changed Reference Type https://git.kernel.org/stable/c/7789a1d6792af410aa9b39a1eb237ed24fa2170a No Types Assigned https://git.kernel.org/stable/c/7789a1d6792af410aa9b39a1eb237ed24fa2170a Patch Changed Reference Type https://git.kernel.org/stable/c/7f4da759092a1a6ce35fb085182d02de8cc4cc84 No Types Assigned https://git.kernel.org/stable/c/7f4da759092a1a6ce35fb085182d02de8cc4cc84 Patch Changed Reference Type https://git.kernel.org/stable/c/a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0 No Types Assigned https://git.kernel.org/stable/c/a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0 Patch Changed Reference Type https://git.kernel.org/stable/c/ab11dac93d2d568d151b1918d7b84c2d02bacbd5 No Types Assigned https://git.kernel.org/stable/c/ab11dac93d2d568d151b1918d7b84c2d02bacbd5 Patch Changed Reference Type https://git.kernel.org/stable/c/b579ea3516c371ecf59d073772bc45dfd28c8a0e No Types Assigned https://git.kernel.org/stable/c/b579ea3516c371ecf59d073772bc45dfd28c8a0e Patch Changed Reference Type https://git.kernel.org/stable/c/c719b393374d3763e64900ee19aaed767d5a08d6 No Types Assigned https://git.kernel.org/stable/c/c719b393374d3763e64900ee19aaed767d5a08d6 Patch Added CWE NIST CWE-129 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.320 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.282 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.224 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.165 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.103 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.44 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.3 -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 19, 2024
Action Type Old Value New Value Added Reference kernel.org https://git.kernel.org/stable/c/166a0bddcc27de41fe13f861c8348e8e53e988c8 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/47b3dce100778001cd76f7e9188944b5cb27a76d [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c719b393374d3763e64900ee19aaed767d5a08d6 [No types assigned] -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 17, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not overflowed. Below is the stack trace I encountered during the actual issue: [ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport] [ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm: QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2 [ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp [ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024 [ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace: [ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0 [ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20 [ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c [ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc [ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38 [ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport] Added Reference kernel.org https://git.kernel.org/stable/c/7f4da759092a1a6ce35fb085182d02de8cc4cc84 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/b579ea3516c371ecf59d073772bc45dfd28c8a0e [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/7789a1d6792af410aa9b39a1eb237ed24fa2170a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ab11dac93d2d568d151b1918d7b84c2d02bacbd5 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-42301 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-42301
weaknesses.