Bug 2329574 (CVE-2024-54159) - CVE-2024-54159 stalld: denial of service [NEEDINFO]
Summary: CVE-2024-54159 stalld: denial of service
Keywords:
Status: MODIFIED
Alias: CVE-2024-54159
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2329810 2329809
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-29 22:01 UTC by OSIDB Bzimport
Modified: 2024-12-17 22:03 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:
williams: needinfo? (ahanwate)
williams: needinfo? (ahanwate)

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-29 22:01:05 UTC 
stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.
Note You need to log in before you can comment on or make changes to this bug.