CVE-2024-24898

MEDIUM Year: 2024
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C. This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.

Related Vulnerabilities

CVE-2011-2707

MEDIUM
CVSS:6.0(Medium)

The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel m...

CWE-2002011

CVE-2016-9103

MEDIUM
CVSS:6.0(Medium)

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before wri...

CWE-2002016

CVE-2017-12315

MEDIUM
CVSS:6.0(Medium)

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restric...

CWE-2002017

CVE-2018-12158

MEDIUM
CVSS:6.0(Medium)

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosur...

CWE-2002018

CVE-2021-21512

MEDIUM
CVSS:6.0(Medium)

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulne...

CWE-2002021

CVE-2022-23509

MEDIUM
CVSS:6.0(Medium)

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchron...

CWE-2002022