Medium · published January 8, 2024
CVSS calls it medium at 5.3. It is confirmed in active exploitation. It sits in the 95.7th percentile for exploit probability.
⚠️ A misplaced pointer is causing chaos! When a non-fungible token (NFT) object references a deleted NFT set from another table, it creates a dangerous use-after-free vulnerability. 😱 Picture a restaurant that allows diners to order from a menu, but if the daily specials get scrapped without a heads-up, the kitchen might accidentally serve a dish that no longer exists! That's the same kind of confusion happening here. An attacker could exploit this flaw to manipulate NFTs, potentially leading to data corruption or unexpected behavior in the application. It's like opening a door to a hidden room where anything could happen — and you never know what might come rushing out!
Picture a restaurant that allows diners to order from a menu, but if the daily specials get scrapped without a heads-up, the kitchen might accidentally serve a dish that no longer exists! That's the same kind of confusion happening here. This use-after-free vulnerability arises when an NFT object or expression incorrectly references a deleted NFT set from a different table, which may lead to memory safety issues in the application.
An attacker could exploit this flaw to manipulate NFTs, potentially leading to data corruption or unexpected behavior in the application. It's like opening a door to a hidden room where anything could happen — and you never know what might come rushing out! Immediately update to the patched version if available, and review your NFT management code to ensure proper references and memory handling to avoid such pitfalls. Regular audits can help catch these sneaky bugs before they become problematic! You've got this! Follow the steps, and you're well on your way to securing your NFT operations! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| siemens/simatic_s7-1500_tm_mfp_firmware | < 1.1 | 1.1 |
| siemens/sinec_os | < 2.4 | 2.4 |
| linux/linux_kernel | ≥ 3.16, < 4.14.316 | 4.14.316 |
| linux/linux_kernel | ≥ 4.15, < 4.19.256 | 4.19.256 |
| linux/linux_kernel | ≥ 4.20, < 5.4.211 | 5.4.211 |
| linux/linux_kernel | ≥ 5.5, < 5.10.137 | 5.10.137 |
| linux/linux_kernel | ≥ 5.11, < 5.15.61 | 5.15.61 |
| linux/linux_kernel | ≥ 5.16, < 5.18.18 | 5.18.18 |
| linux/linux_kernel | ≥ 5.19, < 5.19.2 | 5.19.2 |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |