CVE-2024-36340: Medium severity amd uprof vulnerability
A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36340?
CVE-2024-36340 is classified as a local privilege escalation vulnerability.
How do I fix CVE-2024-36340?
To fix CVE-2024-36340, ensure that you are using the latest version of AMD uProf and apply any available security patches.
What are the potential impacts of CVE-2024-36340?
CVE-2024-36340 may allow a local low-privileged attacker to create junction points, leading to arbitrary file deletion or user data disclosure.
Who is affected by CVE-2024-36340?
CVE-2024-36340 affects users of AMD uProf that have not applied the necessary security updates.
Is CVE-2024-36340 exploitation easy?
Exploitation of CVE-2024-36340 requires local access to the vulnerable system, making it easier for attackers with physical or local login access.