CVE-2024-38517: Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow
Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability
Other sources
Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7159Patch KB5040434 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.3880Patch KB5040442 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.4651Patch KB5040427 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1009Patch KB5040438 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.3880Patch KB5040442 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.4651Patch KB5040427 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6054Patch KB5040430 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2582Patch KB5040437 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.3079Patch KB5040431 - Upgrade
Upgrade
debian/rapidjsonto a version that resolves this vulnerability.Fixed in 1.1.0+dfsg2-7.4 - Upgrade
Upgrade
debian/rapidjsonto a version that resolves this vulnerability.Fixed in 1.1.0+dfsg2-7.4Fixed in 1.1.0+dfsg2-7.6 - Upgrade
Upgrade
alpine/rapidjsonto a version that resolves this vulnerability.Fixed in 1.1.0-r6 - Upgrade
Upgrade
alpine/rapidjsonto a version that resolves this vulnerability.Fixed in 1.1.0-r7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38517?
CVE-2024-38517 is classified as an elevation of privilege vulnerability.
How do I fix CVE-2024-38517?
To fix CVE-2024-38517, apply the appropriate security patches provided by Microsoft for your affected product.
Which software is affected by CVE-2024-38517?
CVE-2024-38517 affects various versions of Microsoft Windows, including Windows Server and Windows 10.
Can CVE-2024-38517 lead to unauthorized access?
Yes, CVE-2024-38517 can potentially allow an attacker to gain unauthorized access to system privileges.
What is the cause of CVE-2024-38517?
CVE-2024-38517 is caused by an integer underflow in the GenericReader::ParseNumber() function of Tencent RapidJSON.