CVE-2024-24258 - Vulnerability Details - OpenCVE

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Artifex	Mupdf
Redhat	Enterprise Linux

Configuration 1 [-]

cpe:2.3:a:artifex:mupdf:1.23.9:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
freeglut-0:3.0.0-9.el8	cpe:/a:redhat:enterprise_linux:8	RHSA-2024:3120	2024-05-22T00:00:00Z
Red Hat Enterprise Linux 9
freeglut-0:3.2.1-10.el9	cpe:/a:redhat:enterprise_linux:9	RHSA-2024:2366	2024-04-30T00:00:00Z

References

Link	Providers
https://github.com/freeglut/freeglut/pull/155
https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/
https://nvd.nist.gov/vuln/detail/CVE-2024-24258
https://www.cve.org/CVERecord?id=CVE-2024-24258

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-02-05T00:00:00

Updated: 2024-08-01T23:19:51.927Z

Reserved: 2024-01-25T00:00:00

Link: CVE-2024-24258

Vulnrichment

Updated: 2024-07-05T15:20:39.440Z

NVD

Status : Modified

Published: 2024-02-05T18:15:52.083

Modified: 2024-11-21T08:59:04.247

Link: CVE-2024-24258

Redhat

Severity : Moderate

Publid Date: 2024-02-12T00:00:00Z

Links: CVE-2024-24258 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-24258", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-01T23:19:51.927Z", "dateReserved": "2024-01-25T00:00:00", "datePublished": "2024-02-05T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-02-21T03:06:28.321905"}, "descriptions": [{"lang": "en", "value": "freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md"}, {"url": "https://github.com/freeglut/freeglut/pull/155"}, {"name": "FEDORA-2024-b69a4d75a1", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/"}, {"name": "FEDORA-2024-0356803680", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-24258", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-07T15:30:52.703759Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T17:21:37.220Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:19:51.927Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md", "tags": ["x_transferred"]}, {"url": "https://github.com/freeglut/freeglut/pull/155", "tags": ["x_transferred"]}, {"name": "FEDORA-2024-b69a4d75a1", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/"}, {"name": "FEDORA-2024-0356803680", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:artifex:mupdf:1.23.9:*:*:*:*:*:*:*", "matchCriteriaId": "3F04E282-A975-4785-B8F2-A65652CF6853", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function."}, {"lang": "es", "value": "Se descubri\u00f3 que mupdf v1.23.9 conten\u00eda una p\u00e9rdida de memoria a trav\u00e9s de la variable menuEntry en la funci\u00f3n glutAddSubMenu."}], "id": "CVE-2024-24258", "lastModified": "2024-11-21T08:59:04.247", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-05T18:15:52.083", "references": [{"source": "cve@mitre.org", "url": "https://github.com/freeglut/freeglut/pull/155"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/freeglut/freeglut/pull/155"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}