CVE-2024-49973
Realtek(r8169) Out-of-Bounds Write Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated memory area is big enough to hold all of the tally counter values, even if we use only parts of it.
INFO
Published Date :
Oct. 21, 2024, 6:15 p.m.
Last Modified :
Nov. 8, 2024, 4:15 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-49973.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-49973 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-49973 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 08, 2024
Action Type Old Value New Value Added Reference kernel.org https://git.kernel.org/stable/c/64648ae8c97ec5a3165021627f5a1658ebe081ca [No types assigned] -
Initial Analysis by [email protected]
Nov. 01, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf No Types Assigned https://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf Patch Changed Reference Type https://git.kernel.org/stable/c/21950321ad33d7613b1453f4c503d7b1871deb61 No Types Assigned https://git.kernel.org/stable/c/21950321ad33d7613b1453f4c503d7b1871deb61 Patch Changed Reference Type https://git.kernel.org/stable/c/585c048d15ed559f20cb94c8fa2f30077efa4fbc No Types Assigned https://git.kernel.org/stable/c/585c048d15ed559f20cb94c8fa2f30077efa4fbc Patch Changed Reference Type https://git.kernel.org/stable/c/92bc8647b4d65f4d4bf8afdb206321c1bc55a486 No Types Assigned https://git.kernel.org/stable/c/92bc8647b4d65f4d4bf8afdb206321c1bc55a486 Patch Changed Reference Type https://git.kernel.org/stable/c/991e8b0bab669b7d06927c3e442b3352532e8581 No Types Assigned https://git.kernel.org/stable/c/991e8b0bab669b7d06927c3e442b3352532e8581 Patch Changed Reference Type https://git.kernel.org/stable/c/ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a No Types Assigned https://git.kernel.org/stable/c/ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a Patch Changed Reference Type https://git.kernel.org/stable/c/fe44b3bfbf0c74df5712f44458689d0eccccf47d No Types Assigned https://git.kernel.org/stable/c/fe44b3bfbf0c74df5712f44458689d0eccccf47d Patch Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4 up to (excluding) 5.10.227 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.168 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.113 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.55 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.14 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.11 up to (excluding) 6.11.3 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 21, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated memory area is big enough to hold all of the tally counter values, even if we use only parts of it. Added Reference kernel.org https://git.kernel.org/stable/c/991e8b0bab669b7d06927c3e442b3352532e8581 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/21950321ad33d7613b1453f4c503d7b1871deb61 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/fe44b3bfbf0c74df5712f44458689d0eccccf47d [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/92bc8647b4d65f4d4bf8afdb206321c1bc55a486 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/585c048d15ed559f20cb94c8fa2f30077efa4fbc [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-49973 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-49973
weaknesses.