CVE-2024-1443 - OpenCVE

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://fluidattacks.com/advisories/coltrane/
https://www.msi.com/Landing/afterburner/graphics-cards

History

No history.

MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2024-03-07T02:48:24.955Z

Updated: 2024-08-01T18:40:21.111Z

Reserved: 2024-02-12T13:53:00.175Z

Link: CVE-2024-1443

Vulnrichment

Updated: 2024-08-01T18:40:21.111Z

NVD

Status : Awaiting Analysis

Published: 2024-03-07T03:15:06.403

Modified: 2024-03-07T13:52:27.110

Link: CVE-2024-1443

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-1443", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "state": "PUBLISHED", "assignerShortName": "Fluid Attacks", "dateReserved": "2024-02-12T13:53:00.175Z", "datePublished": "2024-03-07T02:48:24.955Z", "dateUpdated": "2024-08-01T18:40:21.111Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Windows"], "product": "MSI Afterburner", "vendor": "MSI", "versions": [{"status": "affected", "version": "4.6.5.16370"}]}], "datePublic": "2024-03-06T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process."}], "value": "MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver.\u00a0The handle to the driver can only be obtained from a high integrity process."}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-03-07T02:48:24.955Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://fluidattacks.com/advisories/coltrane/"}, {"tags": ["product"], "url": "https://www.msi.com/Landing/afterburner/graphics-cards"}], "source": {"discovery": "UNKNOWN"}, "title": "MSI Afterburner v4.6.5.16370 - Denial of Service", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1443", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-07T20:06:11.133190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T18:00:41.845Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:40:21.111Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://fluidattacks.com/advisories/coltrane/"}, {"tags": ["product", "x_transferred"], "url": "https://www.msi.com/Landing/afterburner/graphics-cards"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fluidattacks.com/advisories/coltrane/", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.msi.com/Landing/afterburner/graphics-cards", "tags": ["product", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:40:21.111Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1443", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-07T20:06:11.133190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:16.485Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "MSI Afterburner v4.6.5.16370 - Denial of Service", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "MSI", "product": "MSI Afterburner", "versions": [{"status": "affected", "version": "4.6.5.16370"}], "platforms": ["Windows"], "defaultStatus": "unknown"}], "datePublic": "2024-03-06T17:00:00.000Z", "references": [{"url": "https://fluidattacks.com/advisories/coltrane/", "tags": ["third-party-advisory"]}, {"url": "https://www.msi.com/Landing/afterburner/graphics-cards", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver.\u00a0The handle to the driver can only be obtained from a high integrity process.", "supportingMedia": [{"type": "text/html", "value": "MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-03-07T02:48:24.955Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1443", "state": "PUBLISHED", "dateUpdated": "2024-08-01T18:40:21.111Z", "dateReserved": "2024-02-12T13:53:00.175Z", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "datePublished": "2024-03-07T02:48:24.955Z", "assignerShortName": "Fluid Attacks"}, "dataVersion": "5.1"}