CVE-2024-0033
published 2024-02-16CVE-2024-0033: In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
5.6th percentile
In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | frameworks_native | >= 13:0 < 13:2024-02-01 | 13:2024-02-01 |
| platform | frameworks_native | >= 14-next:0 < 14-next:2024-02-01 | 14-next:2024-02-01 |
| platform | frameworks_native | >= 14:0 < 14:2024-02-01 | 14:2024-02-01 |
| platform | system_core | >= 11:0 < 11:2024-02-01 | 11:2024-02-01 |
| platform | system_core | >= 12:0 < 12:2024-02-01 | 12:2024-02-01 |
| platform | system_core | >= 12L:0 < 12L:2024-02-01 | 12L:2024-02-01 |
| platform | system_core | >= 13:0 < 13:2024-02-01 | 13:2024-02-01 |
| platform | system_core | >= 14-next:0 < 14-next:2024-02-01 | 14-next:2024-02-01 |
| platform | system_core | >= 14:0 < 14:2024-02-01 | 14:2024-02-01 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: um: net: Do not use drvdata in release
vendor_redhat·2024-12-27·CVSS 5.5
CVE-2024-53183 [MEDIUM] kernel: um: net: Do not use drvdata in release
kernel: um: net: Do not use drvdata in release
In the Linux kernel, the following vulnerability has been resolved:
um: net: Do not use drvdata in release
The drvdata is not available in release. Let's just use container_of()
to get the uml_net instance. Otherwise, removing a network device will
result in a crash:
RIP: 0033:net_device_release+0x10/0x6f
RSP: 00000000e20c7c40 EFLAGS: 00010206
RAX: 000000006002e4e7 RBX: 00000000600f1baf RCX: 00000000624074e0
RDX: 0000000062778000 RSI: 0000000060551c80 RDI: 00000000627af028
RBP: 00000000e20c7c50 R08: 00000000603ad594 R09: 00000000e20c7b70
R10: 000000000000135a R11: 00000000603ad422 R12: 0000000000000000
R13: 0000000062c7af00 R14: 0000000062406d60 R15: 00000000627700b6
Kernel panic - not syncing: Segfault with no mm
CPU: 0 UID: 0 PID: 29 Comm:
Red Hat
kernel: um: ubd: Do not use drvdata in release
vendor_redhat·2024-12-27·CVSS 5.5
CVE-2024-53184 [MEDIUM] kernel: um: ubd: Do not use drvdata in release
kernel: um: ubd: Do not use drvdata in release
In the Linux kernel, the following vulnerability has been resolved:
um: ubd: Do not use drvdata in release
The drvdata is not available in release. Let's just use container_of()
to get the ubd instance. Otherwise, removing a ubd device will result
in a crash:
RIP: 0033:blk_mq_free_tag_set+0x1f/0xba
RSP: 00000000e2083bf0 EFLAGS: 00010246
RAX: 000000006021463a RBX: 0000000000000348 RCX: 0000000062604d00
RDX: 0000000004208060 RSI: 00000000605241a0 RDI: 0000000000000348
RBP: 00000000e2083c10 R08: 0000000062414010 R09: 00000000601603f7
R10: 000000000000133a R11: 000000006038c4bd R12: 0000000000000000
R13: 0000000060213a5c R14: 0000000062405d20 R15: 00000000604f7aa0
Kernel panic - not syncing: Segfault with no mm
CPU: 0 PID: 17 Comm: kworker/0:1 No
Red Hat
kernel: um: vector: Do not use drvdata in release
vendor_redhat·2024-12-27·CVSS 5.5
CVE-2024-53181 [MEDIUM] kernel: um: vector: Do not use drvdata in release
kernel: um: vector: Do not use drvdata in release
In the Linux kernel, the following vulnerability has been resolved:
um: vector: Do not use drvdata in release
The drvdata is not available in release. Let's just use container_of()
to get the vector_device instance. Otherwise, removing a vector device
will result in a crash:
RIP: 0033:vector_device_release+0xf/0x50
RSP: 00000000e187bc40 EFLAGS: 00010202
RAX: 0000000060028f61 RBX: 00000000600f1baf RCX: 00000000620074e0
RDX: 000000006220b9c0 RSI: 0000000060551c80 RDI: 0000000000000000
RBP: 00000000e187bc50 R08: 00000000603ad594 R09: 00000000e187bb70
R10: 000000000000135a R11: 00000000603ad422 R12: 00000000623ae028
R13: 000000006287a200 R14: 0000000062006d30 R15: 00000000623700b6
Kernel panic - not syncing: Segfault with no mm
CPU: 0 UID: 0 P
Red Hat
kernel: x86/bugs: Use code segment selector for VERW operand
vendor_redhat·2024-10-29·CVSS 5.5
CVE-2024-50072 [MEDIUM] CWE-20 kernel: x86/bugs: Use code segment selector for VERW operand
kernel: x86/bugs: Use code segment selector for VERW operand
In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Use code segment selector for VERW operand
Robert Gill reported below #GP in 32-bit mode when dosemu software was
executing vm86() system call:
general protection fault: 0000 [#1] PREEMPT SMP
CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1
Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010
EIP: restore_all_switch_stack+0xbe/0xcf
EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000
ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc
DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046
CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0
Call Trace:
show_regs+0x70/0x78
die_addr+0x29/0x70
exc_genera
Android
CVE-2024-0033: Android Security Bulletin 2024-02-01
CVE: CVE-2024-0033
Severity: HIGH
Type: EoP
Affected AOSP versions: 11, 12, 12L, 13, 14
References: A-294609150
[
vendor_android·2024-02-01·CVSS 7.8
CVE-2024-0033 [HIGH] CVE-2024-0033: Android Security Bulletin 2024-02-01
CVE: CVE-2024-0033
Severity: HIGH
Type: EoP
Affected AOSP versions: 11, 12, 12L, 13, 14
References: A-294609150
[
Android Security Bulletin 2024-02-01
CVE: CVE-2024-0033
Severity: HIGH
Type: EoP
Affected AOSP versions: 11, 12, 12L, 13, 14
References: A-294609150
[2]
GHSA
GHSA-7pg4-9277-v46w: In multiple functions of ashmem-dev
ghsa_unreviewed·2024-02-16
CVE-2024-0033 [HIGH] CWE-122 GHSA-7pg4-9277-v46w: In multiple functions of ashmem-dev
In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2024-0033: In multiple functions of ashmem-dev
osv·2024-02-01
CVE-2024-0033 CVE-2024-0033: In multiple functions of ashmem-dev
In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Suricata
GPL RPC portmap cachefsd request TCP
suricata·2010-09-23
CVE-2002-0033 GPL RPC portmap cachefsd request TCP
GPL RPC portmap cachefsd request TCP
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 111 (msg:"GPL RPC portmap cachefsd request TCP"; flow:established,to_server; content:"|00 01 86 A0|"; depth:4; offset:16; content:"|00 00 00 03|"; within:4; distance:4; byte_jump:4,4,relative,align; byte_jump:4,4,relative,align; content:"|00 01 87 8B|"; within:4; content:"|00 00 00 00|"; depth:4; offset:8; reference:bugtraq,4674; reference:cve,2002-0033; reference:cve,2002-0084; classtype:rpc-portmap-decode; sid:2101747; rev:13; metadata:created_at 2010_09_23, cve CVE_2002_0033, signature_severity Informational, updated_at 2024_03_08;)
No public exploits indexed.
No writeups or analysis indexed.
https://android.googlesource.com/platform/frameworks/native/+/aa98edf0ce9dde4886979658a459900ca987f193https://android.googlesource.com/platform/system/core/+/46d46dc46446f14f26fbe8fb102dd36c1dfc1229https://source.android.com/security/bulletin/2024-02-01https://android.googlesource.com/platform/frameworks/native/+/aa98edf0ce9dde4886979658a459900ca987f193https://android.googlesource.com/platform/system/core/+/46d46dc46446f14f26fbe8fb102dd36c1dfc1229https://source.android.com/security/bulletin/2024-02-01
2024-02-16
Published