CVE-2024-2398:

Overview

Severity

High (CVSS 8.6)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Exploit Status

Not Exploited

Patch Tuesday

2024-Dec

Released

2024-08-05

Last Updated

2024-12-04

EPSS Score

1.96% (percentile: 83.5%)

Affected Products (4)

Mariner

• CBL Mariner 2.0 x64
• CBL Mariner 2.0 ARM
• Azure Linux 3.0 x64
• Azure Linux 3.0 ARM

Revision History

• 2024-08-05: Information published.
• 2024-08-29: Information published.
• 2024-08-30: Information published.
• 2024-08-31: Information published.
• 2024-09-01: Information published.
• 2024-09-02: Information published.
• 2024-09-03: Information published.
• 2024-09-05: Information published.
• 2024-09-06: Information published.
• 2024-09-07: Information published.
• 2024-09-08: Information published.
• 2024-09-11: Information published.
• 2024-10-01: Information published.
• 2024-10-05: Information published.
• 2024-10-23: Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0 Added cmake to Azure Linux 3.0 Added curl to Azure Linux 3.0
• 2024-10-25: Added mysql to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added curl to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0
• 2024-11-09: Added mysql to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added curl to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0
• 2024-11-28: Added cmake to CBL-Mariner 2.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0 Added mysql to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added curl to Azure Linux 3.0
• 2024-12-04: Added mysql to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added curl to Azure Linux 3.0 Added cmake to CBL-Mariner 2.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0