CVE-2024-23377 - "Open-EVA IOCTL Denial of Service Memory Corruption"

3 weeks ago 9
ARTICLE AD BOX
CVE ID : CVE-2024-23377
Published : Nov. 4, 2024, 10:15 a.m. | 24 minutes ago
Description : Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Severity: 6.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article