ID
VAR-202403-0510
CVE
CVE-2024-0156
TITLE
Dell Digital Delivery Buffer Overflow Vulnerability
Trust: 0.6
DESCRIPTION
Dell Digital Delivery, versions prior to 5.0.86.0, contain a Buffer Overflow vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation. Dell Digital Delivery is an application developed by the American Dell Company specifically for Dell computer equipment and used to purchase computer pre-installed software online. This vulnerability is caused by the program's failure to correctly verify the length of input data
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dell | model: | digital delivery | scope: | lt | version: | 5.0.86.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-122 | Trust: 1.0 |
PATCH
| title: | Patch for Dell Digital Delivery Buffer Overflow Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/536626 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-0156 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-14583 | Trust: 0.6 |
REFERENCES
| url: | https://www.dell.com/support/kbdoc/en-us/000222536/dsa-2024-032-security-update-for-dell-digital-delivery-for-a-buffer-overflow-vulnerability | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-0156 | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2024-14583 |
| db: | NVD | id: | CVE-2024-0156 |
LAST UPDATE DATE
2024-03-23T22:54:17.747000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-14583 | date: | 2024-03-22T00:00:00 |
| db: | NVD | id: | CVE-2024-0156 | date: | 2024-03-04T13:58:23.447 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-14583 | date: | 2024-03-22T00:00:00 |
| db: | NVD | id: | CVE-2024-0156 | date: | 2024-03-04T13:15:44.313 |