p PatchFirst

CVE-2024-30949

CVE-2024-30949

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.

CVSS 9.8 · Critical · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • newlib Debian:12

    Versions
    • 3.3.0-1.3
    • 3.3.0-1.3+deb12u1
    • 4.4.0.20231231-1
    • 4.4.0.20231231-2
    • 4.4.0.20231231-3
    • 4.4.0.20231231-4
    • 4.5.0.20241231-1
    • 4.6.0.20260123-1
    • 4.6.0.20260123-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • newlib Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.4.0.20231231-2

    Update to 4.4.0.20231231-2

  • newlib Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.4.0.20231231-2

    Update to 4.4.0.20231231-2

  • newlib Ubuntu:16.04:LTS

    Versions
    • 2.1.0+git20141201.db59ff3-2
    • 2.2.0+git20150830.5a3d536-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • newlib Ubuntu:18.04:LTS

    Versions
    • 2.4.0.20160527-2
    • 2.4.0.20160527-3
    • 2.4.0.20160527-3ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • newlib Ubuntu:20.04:LTS

    Versions
    • 3.1.0.20181231-1
    • 3.3.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • newlib Ubuntu:22.04:LTS

    Versions
    • 3.3.0-1
    • 3.3.0-1.2
    • 3.3.0-1.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →