CVE-2024-35823 — Classic Buffer Overflow in Linux
Severity
5.3MEDIUMNVD
OSV7.0OSV5.5
EPSS
0.3%
top 49.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
vt: fix unicode buffer corruption when deleting characters
This is the same issue that was fixed for the VGA text buffer in commit
39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the
buffer"). The cure is also the same i.e. replace memcpy() with memmove()
due to the overlaping buffers.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4
Affected Packages9 packages
▶CVEListV5linux/linux81732c3b2fede049a692e58a7ceabb6d18ffb18c — fc7dfe3d123f00e720be80b920da287810a1f37d+8
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
15📋Vendor Advisories
16💬Community
1Bugzilla
▶