Description

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

INFO

Published Date :

2024-08-29T08:03:40.261Z

Last Modified :

2024-08-29T13:28:35.429Z

Source :

dell
AFFECTED PRODUCTS

The following products are affected by CVE-2024-38304 vulnerability.

Vendors Products
Dell
  • Dss 8440
  • Dss 8440 Firmware
  • Emc Storage Nx3240
  • Emc Storage Nx3240 Firmware
  • Emc Storage Nx3340
  • Emc Storage Nx3340 Firmware
  • Emc Xc Core 6420 System
  • Emc Xc Core 6420 System Firmware
  • Emc Xc Core Xc640 System
  • Emc Xc Core Xc640 System Firmware
  • Emc Xc Core Xc740xd2
  • Emc Xc Core Xc740xd2 Firmware
  • Emc Xc Core Xc740xd System
  • Emc Xc Core Xc740xd System Firmware
  • Emc Xc Core Xc940 System
  • Emc Xc Core Xc940 System Firmware
  • Emc Xc Core Xcxr2
  • Emc Xc Core Xcxr2 Firmware
  • Poweredge C4140
  • Poweredge C4140 Firmware
  • Poweredge C6420
  • Poweredge C6420 Firmware
  • Poweredge Fc640
  • Poweredge Fc640 Firmware
  • Poweredge M640
  • Poweredge M640 \(for Pe Vrtx\)
  • Poweredge M640 \(for Pe Vrtx\) Firmware
  • Poweredge M640 Firmware
  • Poweredge Mx740c
  • Poweredge Mx740c Firmware
  • Poweredge Mx840c
  • Poweredge Mx840c Firmware
  • Poweredge R440
  • Poweredge R440 Firmware
  • Poweredge R540
  • Poweredge R540 Firmware
  • Poweredge R640
  • Poweredge R640 Firmware
  • Poweredge R740
  • Poweredge R740 Firmware
  • Poweredge R740xd
  • Poweredge R740xd2
  • Poweredge R740xd2 Firmware
  • Poweredge R740xd Firmware
  • Poweredge R840
  • Poweredge R840 Firmware
  • Poweredge R940
  • Poweredge R940 Firmware
  • Poweredge R940xa
  • Poweredge R940xa Firmware
  • Poweredge T440
  • Poweredge T440 Firmware
  • Poweredge T640
  • Poweredge T640 Firmware
  • Poweredge Xe2420
  • Poweredge Xe2420 Firmware
  • Poweredge Xe7420
  • Poweredge Xe7420 Firmware
  • Poweredge Xe7440
  • Poweredge Xe7440 Firmware
  • Poweredge Xr2
  • Poweredge Xr2 Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-38304.

URL Resource
https://www.dell.com/support/kbdoc/en-us/000228137/dsa-2024-310-security-update-for-dell-poweredge-server-for-access-of-memory-location-after-end-of-buffer-vulnerability cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact