Details of VAR-202408-1360

ID

VAR-202408-1360

CVE

CVE-2024-43882

TITLE

Linux of Linux Kernel In Time-of-check Time-of-use (TOCTOU) Race condition vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2024-007155

DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is done against the file's metadata at that moment, and on success, a file pointer is passed back. Much later in the execve() code path, the file metadata (specifically mode, uid, and gid) is used to determine if/how to set the uid and gid. However, those values may have changed since the permissions check, meaning the execution may gain unintended privileges. For example, if a file could change permissions from executable and not set-id: ---------x 1 root root 16048 Aug 7 13:16 target to set-id and non-executable: ---S------ 1 root root 16048 Aug 7 13:16 target it is possible to gain root privileges when execution should have been disallowed. While this race condition is rare in real-world scenarios, it has been observed (and proven exploitable) when package managers are updating the setuid bits of installed programs. Such files start with being world-executable but then are adjusted to be group-exec with a set-uid bit. For example, "chmod o-x,u+s target" makes "target" executable only by uid "root" and gid "cdrom", while also becoming setuid-root: -rwxr-xr-x 1 root cdrom 16048 Aug 7 13:16 target becomes: -rwsr-xr-- 1 root cdrom 16048 Aug 7 13:16 target But racing the chmod means users without group "cdrom" membership can get the permission to execute "target" just before the chmod, and when the chmod finishes, the exec reaches brpm_fill_uid(), and performs the setuid to root, violating the expressed authorization of "only cdrom group members can setuid to root". Re-check that we still have execute permissions in case the metadata has changed. It would be better to keep a copy from the perm-check time, but until we can do that refactoring, the least-bad option is to do a full inode_permission() call (under inode lock). It is understood that this is safe against dead-locks, but hardly optimal. Linux of Linux Kernel for, Time-of-check Time-of-use (TOCTOU) There is a race condition vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The RUGGEDCOM RST2428P is a Layer 2 Ethernet switch based on SINEC OS with up to 28 non-blocking interfaces. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) and human-machine interfaces (HMIs). Multiple vulnerabilities exist in third-party components prior to SIEMENS SINEC OS V3.2. These vulnerabilities could be exploited to corrupt values, leading to undefined behavior or security issues. ========================================================================== Ubuntu Security Notice USN-7120-1 November 19, 2024 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-hwe-6.8, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-raspi vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-lowlatency: Linux low latency kernel for NVIDIA systems - linux-oem-6.8: Linux kernel for OEM systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-gcp-6.8: Linux kernel for Google Cloud Platform (GCP) systems - linux-hwe-6.8: Linux hardware enablement (HWE) kernel - linux-nvidia-6.8: Linux kernel for NVIDIA systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - Network traffic control; (CVE-2024-46800, CVE-2024-43882) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1014-gke 6.8.0-1014.18 linux-image-6.8.0-1015-raspi 6.8.0-1015.17 linux-image-6.8.0-1016-ibm 6.8.0-1016.16 linux-image-6.8.0-1016-oracle 6.8.0-1016.17 linux-image-6.8.0-1016-oracle-64k 6.8.0-1016.17 linux-image-6.8.0-1017-oem 6.8.0-1017.17 linux-image-6.8.0-1018-gcp 6.8.0-1018.20 linux-image-6.8.0-1018-nvidia 6.8.0-1018.20 linux-image-6.8.0-1018-nvidia-64k 6.8.0-1018.20 linux-image-6.8.0-1018-nvidia-lowlatency 6.8.0-1018.20.1 linux-image-6.8.0-1018-nvidia-lowlatency-64k 6.8.0-1018.20.1 linux-image-6.8.0-1019-aws 6.8.0-1019.21 linux-image-6.8.0-49-generic 6.8.0-49.49 linux-image-6.8.0-49-generic-64k 6.8.0-49.49 linux-image-aws 6.8.0-1019.21 linux-image-gcp 6.8.0-1018.20 linux-image-generic 6.8.0-49.49 linux-image-generic-64k 6.8.0-49.49 linux-image-generic-64k-hwe-24.04 6.8.0-49.49 linux-image-generic-hwe-24.04 6.8.0-49.49 linux-image-generic-lpae 6.8.0-49.49 linux-image-gke 6.8.0-1014.18 linux-image-ibm 6.8.0-1016.16 linux-image-ibm-classic 6.8.0-1016.16 linux-image-ibm-lts-24.04 6.8.0-1016.16 linux-image-kvm 6.8.0-49.49 linux-image-nvidia 6.8.0-1018.20 linux-image-nvidia-64k 6.8.0-1018.20 linux-image-nvidia-lowlatency 6.8.0-1018.20.1 linux-image-nvidia-lowlatency-64k 6.8.0-1018.20.1 linux-image-oem-24.04 6.8.0-1017.17 linux-image-oem-24.04a 6.8.0-1017.17 linux-image-oracle 6.8.0-1016.17 linux-image-oracle-64k 6.8.0-1016.17 linux-image-raspi 6.8.0-1015.17 linux-image-virtual 6.8.0-49.49 linux-image-virtual-hwe-24.04 6.8.0-49.49 Ubuntu 22.04 LTS linux-image-6.8.0-1018-gcp 6.8.0-1018.20~22.04.1 linux-image-6.8.0-1018-nvidia 6.8.0-1018.20~22.04.1 linux-image-6.8.0-1018-nvidia-64k 6.8.0-1018.20~22.04.1 linux-image-6.8.0-49-generic 6.8.0-49.49~22.04.1 linux-image-6.8.0-49-generic-64k 6.8.0-49.49~22.04.1 linux-image-gcp 6.8.0-1018.20~22.04.1 linux-image-generic-64k-hwe-22.04 6.8.0-49.49~22.04.1 linux-image-generic-hwe-22.04 6.8.0-49.49~22.04.1 linux-image-nvidia-6.8 6.8.0-1018.20~22.04.1 linux-image-nvidia-64k-6.8 6.8.0-1018.20~22.04.1 linux-image-nvidia-64k-hwe-22.04 6.8.0-1018.20~22.04.1 linux-image-nvidia-hwe-22.04 6.8.0-1018.20~22.04.1 linux-image-oem-22.04 6.8.0-49.49~22.04.1 linux-image-oem-22.04a 6.8.0-49.49~22.04.1 linux-image-oem-22.04b 6.8.0-49.49~22.04.1 linux-image-oem-22.04c 6.8.0-49.49~22.04.1 linux-image-oem-22.04d 6.8.0-49.49~22.04.1 linux-image-virtual-hwe-22.04 6.8.0-49.49~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7120-1 CVE-2024-43882, CVE-2024-46800 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-49.49 https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1019.21 https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1018.20 https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1014.18 https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1016.16 https://launchpad.net/ubuntu/+source/linux-nvidia/6.8.0-1018.20 https://launchpad.net/ubuntu/+source/linux-nvidia-lowlatency/6.8.0-1018.20.1 https://launchpad.net/ubuntu/+source/linux-oem-6.8/6.8.0-1017.17 https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1016.17 https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1015.17 https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1018.20~22.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-49.49~22.04.1 https://launchpad.net/ubuntu/+source/linux-nvidia-6.8/6.8.0-1018.20~22.04.1

Trust: 2.97

sources: NVD: CVE-2024-43882 // JVNDB: JVNDB-2024-007155 // CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350 // PACKETSTORM: 182708 // PACKETSTORM: 182705 // PACKETSTORM: 182756

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 1.2

sources: CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350

AFFECTED PRODUCTS

vendor:	linux	model:	kernel	scope:	eq	version:	6.11	Trust: 1.8
vendor:	linux	model:	kernel	scope:	lt	version:	5.4.282	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	4.20	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.5	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.6.47	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.2	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.16	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	4.19.320	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.10.6	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.15.165	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.7	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.1.106	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.10.224	Trust: 1.0
vendor:	linux	model:	kernel	scope:	eq	version:	5.5 that's all 5.10.224	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	4.20 that's all 5.4.282	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.7 that's all 6.10.6	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.11 that's all 5.15.165	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.16 that's all 6.1.106	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	4.19.320	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.2 that's all 6.6.47	Trust: 0.8
vendor:	siemens	model:	ruggedcom rst2428p	scope:	lt	version:	v3.1	Trust: 0.6
vendor:	siemens	model:	scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family	scope:	lt	version:	v3.1	Trust: 0.6
vendor:	siemens	model:	scalance xcm-/xrm-/xch-/xrh-300 family	scope:	lt	version:	v3.1	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst2428p	scope:	lt	version:	v3.2	Trust: 0.6
vendor:	siemens	model:	scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family	scope:	lt	version:	v3.2	Trust: 0.6
vendor:	siemens	model:	scalance xcm-/xrm-/xch-/xrh-300 family	scope:	lt	version:	v3.2	Trust: 0.6

sources: CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-007155 // NVD: CVE-2024-43882

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-43882
value:	HIGH
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-43882
value:	HIGH
Trust: 1.0
NVD:	CVE-2024-43882
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2025-19346
value:	HIGH
Trust: 0.6
CNVD:	CNVD-2025-19350
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-19346
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
CNVD:	CNVD-2025-19350
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2024-43882
baseSeverity:	HIGH
baseScore:	7.0
vectorString:	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.0
impactScore:	5.9
version:	3.1
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-43882
baseSeverity:	HIGH
baseScore:	8.4
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.5
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2024-43882
baseSeverity:	HIGH
baseScore:	7.0
vectorString:	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-007155 // NVD: CVE-2024-43882 // NVD: CVE-2024-43882

PROBLEMTYPE DATA

problemtype:	CWE-367	Trust: 1.0
problemtype:	Time-of-check Time-of-use (TOCTOU) Race condition (CWE-367) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-007155 // NVD: CVE-2024-43882

PATCH

title:	Linux Kernel Archives	url:	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=15469d46ba34559bfe7e3de6659115778c624759	Trust: 0.8
title:	Patch for Multiple vulnerabilities in Siemens SINEC OS third-party components	url:	https://www.cnvd.org.cn/patchInfo/show/723071	Trust: 0.6
title:	Patch for Multiple vulnerabilities exist in third-party components of SIEMENS SINEC OS V3.2 and earlier	url:	https://www.cnvd.org.cn/patchInfo/show/723061	Trust: 0.6

sources: CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-007155

EXTERNAL IDS

db:	NVD	id:	CVE-2024-43882	Trust: 2.9
db:	SIEMENS	id:	SSA-613116	Trust: 1.6
db:	SIEMENS	id:	SSA-355557	Trust: 1.6
db:	SIEMENS	id:	SSA-265688	Trust: 1.0
db:	JVN	id:	JVNVU92169998	Trust: 0.8
db:	ICS CERT	id:	ICSA-25-226-07	Trust: 0.8
db:	JVNDB	id:	JVNDB-2024-007155	Trust: 0.8
db:	CNVD	id:	CNVD-2025-19346	Trust: 0.6
db:	CNVD	id:	CNVD-2025-19350	Trust: 0.6
db:	PACKETSTORM	id:	182708	Trust: 0.1
db:	PACKETSTORM	id:	182705	Trust: 0.1
db:	PACKETSTORM	id:	182756	Trust: 0.1

sources: CNVD: CNVD-2025-19346 // CNVD: CNVD-2025-19350 // PACKETSTORM: 182708 // PACKETSTORM: 182705 // PACKETSTORM: 182756 // JVNDB: JVNDB-2024-007155 // NVD: CVE-2024-43882

REFERENCES

url:	https://cert-portal.siemens.com/productcert/html/ssa-613116.html	Trust: 1.6
url:	https://cert-portal.siemens.com/productcert/html/ssa-355557.html	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2024-43882	Trust: 1.1
url:	https://git.kernel.org/stable/c/15469d46ba34559bfe7e3de6659115778c624759	Trust: 1.0
url:	https://git.kernel.org/stable/c/368f6985d46657b8b466a421dddcacd4051f7ada	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html	Trust: 1.0
url:	https://git.kernel.org/stable/c/9b424c5d4130d56312e2a3be17efb0928fec4d64	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-265688.html	Trust: 1.0
url:	https://git.kernel.org/stable/c/90dfbba89ad4f0d9c9744ecbb1adac4aa2ff4f3e	Trust: 1.0
url:	https://git.kernel.org/stable/c/d2a2a4714d80d09b0f8eb6438ab4224690b7121e	Trust: 1.0
url:	https://git.kernel.org/stable/c/d5c3c7e26275a2d83b894d30f7582a42853a958f	Trust: 1.0
url:	https://git.kernel.org/stable/c/f6cfc6bcfd5e1cf76115b6450516ea4c99897ae1	Trust: 1.0
url:	https://git.kernel.org/stable/c/f50733b45d865f91db90919f8311e2127ce5a0cb	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html	Trust: 1.0
url:	https://jvn.jp/vu/jvnvu92169998/index.html	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07	Trust: 0.8
url:	https://ubuntu.com/security/notices/usn-7120-1	Trust: 0.3
url:	https://ubuntu.com/security/notices/usn-7120-2	Trust: 0.2
url:	https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8.0-1016.17~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1019.21~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-azure-6.8/6.8.0-1018.21~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1018.21	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1018.20~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux/6.8.0-49.49	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-nvidia-lowlatency/6.8.0-1018.20.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-nvidia/6.8.0-1018.20	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-oem-6.8/6.8.0-1017.17	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1016.17	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-49.49~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1014.18	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-nvidia-6.8/6.8.0-1018.20~22.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1018.20	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1015.17	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1019.21	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1016.16	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8.0-49.49.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.8/6.8.0-49.49.1~22.04.1	Trust: 0.1
url:	https://ubuntu.com/security/notices/usn-7120-3	Trust: 0.1

CREDITS

Ubuntu

Trust: 0.3

sources: PACKETSTORM: 182708 // PACKETSTORM: 182705 // PACKETSTORM: 182756

SOURCES

db:	CNVD	id:	CNVD-2025-19346
db:	CNVD	id:	CNVD-2025-19350
db:	PACKETSTORM	id:	182708
db:	PACKETSTORM	id:	182705
db:	PACKETSTORM	id:	182756
db:	JVNDB	id:	JVNDB-2024-007155
db:	NVD	id:	CVE-2024-43882

LAST UPDATE DATE

2026-06-19T20:15:54.417000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-19346	date:	2025-08-22T00:00:00
db:	CNVD	id:	CNVD-2025-19350	date:	2025-08-22T00:00:00
db:	JVNDB	id:	JVNDB-2024-007155	date:	2025-09-02T02:15:00
db:	NVD	id:	CVE-2024-43882	date:	2026-05-12T12:17:08.163

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-19346	date:	2025-08-12T00:00:00
db:	CNVD	id:	CNVD-2025-19350	date:	2025-08-12T00:00:00
db:	PACKETSTORM	id:	182708	date:	2024-11-20T15:50:06
db:	PACKETSTORM	id:	182705	date:	2024-11-20T15:49:20
db:	PACKETSTORM	id:	182756	date:	2024-11-22T15:07:24
db:	JVNDB	id:	JVNDB-2024-007155	date:	2024-09-04T00:00:00
db:	NVD	id:	CVE-2024-43882	date:	2024-08-21T01:15:12.340