CVE-2024-1222
published 2024-03-14CVE-2024-1222: This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small…
PriorityP278critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
63.98%
99.1th percentile
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| papercut | papercut_mf | < 20.1.10 | 20.1.10 |
| papercut | papercut_mf | >= 21.0.0 < 21.2.14 | 21.2.14 |
| papercut | papercut_mf | >= 22.0.0 < 22.1.5 | 22.1.5 |
| papercut | papercut_mf | >= 23.0.1 < 23.0.7 | 23.0.7 |
| papercut | papercut_ng | < 20.1.10 | 20.1.10 |
| papercut | papercut_ng | >= 21.0.0 < 21.2.14 | 21.2.14 |
| papercut | papercut_ng | >= 22.0.0 < 22.1.5 | 22.1.5 |
| papercut | papercut_ng | >= 23.0.1 < 23.0.7 | 23.0.7 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8q2g-9f98-xxwf: This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges
ghsa_unreviewed·2024-03-14
CVE-2024-1222 [HIGH] CWE-200 GHSA-8q2g-9f98-xxwf: This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.
Red Hat
kernel: media: dvb-frontends: avoid stack overflow warnings with clang
vendor_redhat·2024-05-01·CVSS 7.8
CVE-2024-27075 [HIGH] kernel: media: dvb-frontends: avoid stack overflow warnings with clang
kernel: media: dvb-frontends: avoid stack overflow warnings with clang
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: avoid stack overflow warnings with clang
A previous patch worked around a KASAN issue in stv0367, now a similar
problem showed up with clang:
drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than]
1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe)
Rework the stv0367_writereg() function to be simpler and mark both
register access functions as noinline_for_stack so the temporary
i2c_msg structures do not get duplicated on the stack when KASAN_STACK
is enabled.
Package: kernel (Red Hat Enterprise Linux 6) - Not affe
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-14
Published