Description
A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261596.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| COVESA | vsomeip | 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.7, 3.4.8, 3.4.9, 3.4.10 | — |
References
- VDB-261596 | COVESA vsomeip race condition vdb-entry
- VDB-261596 | CTI Indicators (IOB, IOC) signature permissions-required
- Submit #312410 | Bayerische Motoren Werke Aktiengesellschaft vsomeip 3.4.10 Concurrency Bug third-party-advisory
- https://github.com/COVESA/vsomeip/issues/663 issue-tracking
- https://github.com/COVESA/vsomeip/files/14904610/details.zip exploit