CVE-2024-1298 - Vulnerability Details

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Redhat	Enterprise Linux Rhel Aus Rhel E4s Rhel Eus Rhel Tus
Tianocore	Edk2

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
edk2-0:20220126gitbb1bba3d77-13.el8_10.2	cpe:/a:redhat:enterprise_linux:8	RHSA-2024:5297	2024-08-13T00:00:00Z
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
edk2-0:20220126gitbb1bba3d77-2.el8_6.5	cpe:/a:redhat:rhel_aus:8.6	RHSA-2024:5623	2024-08-20T00:00:00Z
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
edk2-0:20220126gitbb1bba3d77-2.el8_6.5	cpe:/a:redhat:rhel_tus:8.6	RHSA-2024:5623	2024-08-20T00:00:00Z
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
edk2-0:20220126gitbb1bba3d77-2.el8_6.5	cpe:/a:redhat:rhel_e4s:8.6	RHSA-2024:5623	2024-08-20T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support
edk2-0:20220126gitbb1bba3d77-4.el8_8.4	cpe:/a:redhat:rhel_eus:8.8	RHSA-2024:4747	2024-07-23T00:00:00Z
Red Hat Enterprise Linux 9
edk2-0:20240524-6.el9_5	cpe:/a:redhat:enterprise_linux:9	RHSA-2024:9088	2024-11-12T00:00:00Z

References

Link	Providers
https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/
https://nvd.nist.gov/vuln/detail/CVE-2024-1298
https://security.netapp.com/advisory/ntap-20250306-0002/
https://www.cve.org/CVERecord?id=CVE-2024-1298

History

Fri, 07 Mar 2025 01:30:00 +0000

Type	Values Removed	Values Added
References		https://security.netapp.com/advisory/ntap-20250306-0002/

Fri, 07 Mar 2025 01:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tianocore Tianocore edk2
CPEs		cpe:2.3:a:tianocore:edk2::::::::
Vendors & Products		Tianocore Tianocore edk2
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 13 Nov 2024 02:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:/a:redhat:enterprise_linux:9

Tue, 20 Aug 2024 22:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Redhat rhel Aus Redhat rhel E4s Redhat rhel Tus
CPEs		cpe:/a:redhat:rhel_aus:8.6 cpe:/a:redhat:rhel_e4s:8.6 cpe:/a:redhat:rhel_tus:8.6
Vendors & Products		Redhat rhel Aus Redhat rhel E4s Redhat rhel Tus

Fri, 16 Aug 2024 18:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:8
Vendors & Products		Redhat enterprise Linux

MITRE

Status: PUBLISHED

Assigner: TianoCore

Published: 2024-05-30T20:46:21.627Z

Updated: 2025-03-07T00:10:43.273Z

Reserved: 2024-02-06T22:34:56.196Z

Link: CVE-2024-1298

Vulnrichment

Updated: 2025-03-07T00:10:43.273Z

NVD

Status : Awaiting Analysis

Published: 2024-05-30T21:15:09.213

Modified: 2025-03-07T01:15:11.353

Link: CVE-2024-1298

Redhat

Severity : Moderate

Publid Date: 2024-05-31T00:00:00Z

Links: CVE-2024-1298 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-1298", "assignerOrgId": "65518388-201a-4f93-8712-366d21fe8d2c", "state": "PUBLISHED", "assignerShortName": "TianoCore", "dateReserved": "2024-02-06T22:34:56.196Z", "datePublished": "2024-05-30T20:46:21.627Z", "dateUpdated": "2025-03-07T00:10:43.273Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "edk2", "vendor": "TianoCore", "versions": [{"lessThan": "edk2-stable202405", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Binarly"}], "datePublic": "2024-05-30T14:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p>"}], "value": "EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability."}], "impacts": [{"capecId": "CAPEC-128", "descriptions": [{"lang": "en", "value": "CAPEC-128 Integer Attacks"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-369", "description": "CWE-369 Divide By Zero", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "65518388-201a-4f93-8712-366d21fe8d2c", "shortName": "TianoCore", "dateUpdated": "2024-06-11T03:06:08.043Z"}, "references": [{"url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/"}], "source": {"advisory": "BRLY-2023-021", "discovery": "EXTERNAL"}, "title": "Integer Overflow caused by divide by zero during S3 suspension", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20250306-0002/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-07T00:10:43.273Z"}}, {"affected": [{"vendor": "tianocore", "product": "edk2", "cpes": ["cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "edk2-stable202405", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-13T14:21:54.741794Z", "id": "CVE-2024-1298", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-13T18:23:43.259Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20250306-0002/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-07T00:10:43.273Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1298", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-13T14:21:54.741794Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*"], "vendor": "tianocore", "product": "edk2", "versions": [{"status": "affected", "version": "0", "lessThan": "edk2-stable202405", "versionType": "custom"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T17:14:16.706Z"}}], "cna": {"title": "Integer Overflow caused by divide by zero during S3 suspension", "source": {"advisory": "BRLY-2023-021", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Binarly"}], "impacts": [{"capecId": "CAPEC-128", "descriptions": [{"lang": "en", "value": "CAPEC-128 Integer Attacks"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TianoCore", "product": "edk2", "versions": [{"status": "affected", "version": "0", "lessThan": "edk2-stable202405", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2024-05-30T14:00:00.000Z", "references": [{"url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.", "supportingMedia": [{"type": "text/html", "value": "<p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-369", "description": "CWE-369 Divide By Zero"}]}], "providerMetadata": {"orgId": "65518388-201a-4f93-8712-366d21fe8d2c", "shortName": "TianoCore", "dateUpdated": "2024-06-11T03:06:08.043Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1298", "state": "PUBLISHED", "dateUpdated": "2025-03-07T00:10:43.273Z", "dateReserved": "2024-02-06T22:34:56.196Z", "assignerOrgId": "65518388-201a-4f93-8712-366d21fe8d2c", "datePublished": "2024-05-30T20:46:21.627Z", "assignerShortName": "TianoCore"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability."}, {"lang": "es", "value": "EDK2 contiene una vulnerabilidad cuando se activa la suspensi\u00f3n de S3 donde un atacante puede causar una divisi\u00f3n por cero debido a un desbordamiento de UNIT32 a trav\u00e9s del acceso local. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede provocar una p\u00e9rdida de disponibilidad."}], "id": "CVE-2024-1298", "lastModified": "2025-03-07T01:15:11.353", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 4.0, "source": "infosec@edk2.groups.io", "type": "Secondary"}]}, "published": "2024-05-30T21:15:09.213", "references": [{"source": "infosec@edk2.groups.io", "url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53"}, {"source": "infosec@edk2.groups.io", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/"}, {"source": "infosec@edk2.groups.io", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7NUL7NSZQ76A5OKDUCODQNY7WSX4SST/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VIMEZWDKEIQKU7NMHKL57DOCITPGEXYN/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20250306-0002/"}], "sourceIdentifier": "infosec@edk2.groups.io", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "infosec@edk2.groups.io", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2024:5297", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "edk2-0:20220126gitbb1bba3d77-13.el8_10.2", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-08-13T00:00:00Z"}, {"advisory": "RHSA-2024:5623", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "edk2-0:20220126gitbb1bba3d77-2.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2024-08-20T00:00:00Z"}, {"advisory": "RHSA-2024:5623", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "edk2-0:20220126gitbb1bba3d77-2.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2024-08-20T00:00:00Z"}, {"advisory": "RHSA-2024:5623", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "edk2-0:20220126gitbb1bba3d77-2.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2024-08-20T00:00:00Z"}, {"advisory": "RHSA-2024:4747", "cpe": "cpe:/a:redhat:rhel_eus:8.8", "package": "edk2-0:20220126gitbb1bba3d77-4.el8_8.4", "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "release_date": "2024-07-23T00:00:00Z"}, {"advisory": "RHSA-2024:9088", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "edk2-0:20240524-6.el9_5", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-11-12T00:00:00Z"}], "bugzilla": {"description": "edk2: Temporary DoS vulnerability", "id": "2284243", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284243"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-369", "details": ["EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.", "A divide-by-zero vulnerability was found in edk2. A successful exploit of this vulnerability may lead to a loss of availability."], "name": "CVE-2024-1298", "public_date": "2024-05-31T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-1298\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-1298\nhttps://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53"], "threat_severity": "Moderate"}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object