CVE-2024-10238: fld->used_bytes without sanity check causes stack overflow
A security issue in the firmware image verification implementation
at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will cause a stack overflow is caused by not checking fld->usedbytes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10238?
CVE-2024-10238 has been classified as a critical vulnerability due to its potential for remote exploitation and significant impact.
How do I fix CVE-2024-10238?
To fix CVE-2024-10238, it is recommended to update the firmware of the Supermicro MBD-X12DPG-OA6 to the latest version provided by Supermicro.
What types of attacks can exploit CVE-2024-10238?
CVE-2024-10238 can be exploited by attackers who upload malicious firmware images that trigger a stack overflow.
Is there a patch available for CVE-2024-10238?
Yes, a patch for CVE-2024-10238 is available from Supermicro to address the vulnerability.
What are the potential impacts of CVE-2024-10238?
The potential impacts of CVE-2024-10238 include unauthorized access, system crashes, and potentially full control over affected devices.