CVE-2024-42154

MEDIUM Year: 2024
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-754
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).

Related Vulnerabilities

CVE-2018-12189

MEDIUM
CVSS:4.4(Medium)

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially m...

CWE-7542018

CVE-2022-28793

MEDIUM
CVSS:4.4(Medium)

Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch i...

CWE-7542022

CVE-2022-36794

MEDIUM
CVSS:4.4(Medium)

Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access.

CWE-7542022

CVE-2018-25007

MEDIUM
CVSS:4.3(Medium)

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values...

CWE-7542018

CVE-2020-3449

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent authorized users from monitoring the B...

CWE-7542020

CVE-2021-33605

MEDIUM
CVSS:4.3(Medium)

Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4....

CWE-7542021