CVE-2024-0155

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-0155
Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or execution of arbitrary code.

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:digital_delivery:*:*:*:*:*:*:*:*
History

08 Jan 2025, 16:10

Type Values Removed Values Added
First Time Dell
Dell digital Delivery
References () https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 - () https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 - Vendor Advisory
CPE cpe:2.3:a:dell:digital_delivery:*:*:*:*:*:*:*:*

21 Nov 2024, 08:45

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 - () https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033 -

22 Aug 2024, 05:15

Type Values Removed Values Added
Summary
  • (es) Dell Digital Delivery, versiones anteriores a 5.0.86.0, contienen una vulnerabilidad de Use After Free. Un atacante local con pocos privilegios podría explotar esta vulnerabilidad, provocando el bloqueo de la aplicación o la ejecución de código arbitrario.
Summary (en) Dell Digital Delivery, versions prior to 5.0.86.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to an application crash or execution of arbitrary code. (en) Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or execution of arbitrary code.

04 Mar 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-04 13:15

Updated : 2025-01-08 16:10

NVD link : CVE-2024-0155

Mitre link : CVE-2024-0155

CVE.ORG link : CVE-2024-0155

JSON object : View

Products Affected

dell

  • digital_delivery
CWE
CWE-416

Use After Free