CVE-2024-20861
published 2024-05-07CVE-2024-20861: Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.
PriorityP428medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.19%
8.9th percentile
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | android | — | — |
| samsung | android | — | — |
| samsung | android | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_oracle6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v9v3-78qq-v64f: Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption
ghsa_unreviewed·2024-05-07
CVE-2024-20861 [MEDIUM] CWE-416 GHSA-v9v3-78qq-v64f: Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Install (Spring Framework) — CVE-2023-20861
vendor_oracle·2024-04-15·CVSS 6.5
CVE-2023-20861 [MEDIUM] Oracle Oracle Enterprise Manager Risk Matrix: Install (Spring Framework) — CVE-2023-20861
Oracle Oracle Enterprise Manager Risk Matrix: Install (Spring Framework) vulnerability
CVE: CVE-2023-20861
CVSS: 6.5
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-05-07
Published