CVE-2024-20697

Katalog CVE

CVSS 7.3 · High EPSS 72,2%

Kerentanan Heap-based Buffer Overflow pada microsoft windows 11 22h2, microsoft windows 11 23h2 +1 lainnya. Skor CVSS 3.1 7.3 (High) menurut microsoft.com.

Deskripsi (NVD)

Windows libarchive Remote Code Execution Vulnerability

Rincian

Terbit di NVD

9 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

72,2% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697 patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2024/06/04/2
• http://www.openwall.com/lists/oss-security/2024/06/05/1
• https://github.com/advisories/GHSA-w6xv-37jv-7cjr
• https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulne...