CVE-2024-38304

First published: Thu Aug 29 2024(Updated: )

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
All of
Dell Emc Xc Core Xcxr2 Firmware	<2.22.1
Dell Emc Xc Core Xcxr2
All of
Dell Emc Xc Core Xc940 System Firmware	<2.22.2
Dell Emc Xc Core Xc940 System
All of
Dell Emc Xc Core Xc740xd2 Firmware	<2.22.1
Dell Emc Xc Core Xc740xd2
All of
Dell Emc Xc Core Xc740xd System Firmware	<2.22.2
Dell Emc Xc Core Xc740xd System
All of
Dell Emc Xc Core Xc640 System Firmware	<2.22.2
Dell Emc Xc Core Xc640 System
All of
Dell Emc Xc Core 6420 System Firmware	<2.22.2
Dell Emc Xc Core 6420 System
All of
Dell Emc Storage Nx3340 Firmware	<2.22.2
Dell Emc Storage Nx3340
All of
Dell Emc Storage Nx3240 Firmware	<2.22.2
Dell Emc Storage Nx3240
All of
Dell Poweredge Xe7440 Firmware	<2.22.2
Dell Poweredge Xe7440
All of
Dell Poweredge Xe7420 Firmware	<2.22.2
Dell Poweredge Xe7420
All of
Dell Poweredge Xe2420 Firmware	<2.22.2
Dell Poweredge Xe2420
All of
Dell Dss 8440 Firmware	<2.22.2
Dell Dss 8440
All of
Dell Poweredge C4140 Firmware	<2.22.2
Dell Poweredge C4140
All of
Dell Poweredge Mx840c Firmware	<2.22.1
Dell Poweredge Mx840c
All of
Dell Poweredge Mx740c Firmware	<2.22.1
Dell Poweredge Mx740c
All of
Dell Poweredge M640 \(for Pe Vrtx\) Firmware	<2.22.2
Dell Poweredge M640 \(for Pe Vrtx\)
All of
Dell Poweredge M640 Firmware	<2.22.2
Dell Poweredge M640
All of
Dell Poweredge Fc640 Firmware	<2.22.2
Dell Poweredge Fc640
All of
Dell Poweredge C6420 Firmware	<2.22.2
Dell Poweredge C6420
All of
Dell Poweredge T640 Firmware	<2.22.1
Dell Poweredge T640
All of
Dell Poweredge R940xa Firmware	<2.22.1
Dell Poweredge R940xa
All of
Dell Poweredge R840 Firmware	<2.22.1
Dell Poweredge R840
All of
Dell Poweredge R740xd2 Firmware	<2.22.1
Dell Poweredge R740xd2
All of
Dell Poweredge Xr2 Firmware	<2.22.1
Dell Poweredge Xr2
All of
Dell Poweredge T440 Firmware	<2.22.1
Dell Poweredge T440
All of
Dell Poweredge R440 Firmware	<2.22.1
Dell Poweredge R440
All of
Dell Poweredge R540 Firmware	<2.22.1
Dell Poweredge R540
All of
Dell Poweredge R940 Firmware	<2.22.2
Dell Poweredge R940
All of
Dell Poweredge R640 Firmware	<2.22.2
Dell PowerEdge R640
All of
Dell Poweredge R740xd Firmware	<2.22.2
Dell Poweredge R740xd
All of
Dell Poweredge R740 Firmware	<2.22.2
Dell Poweredge R740

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/en-us/000228137/dsa-2024-310-security-update-for-dell-poweredge-server-for-access-of-memory-location-after-end-of-buffer-vulnerability

CVE-2024-38304

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact