What’s Vulnerable › Vulnerabilities

CVE-2024-54159

• Severity: medium (CVSS 4.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-29 · updated 2026-06-17
• Weakness: CWE-732

Description

stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.

References

• https://cwe.mitre.org/data/definitions/61.html
• https://security.opensuse.org/2024/11/29/stalld-fixed-tmp-file.html
• https://www.openwall.com/lists/oss-security/2024/11/29/3

Get alerted when CVE-2024-54159 or the next vulnerability affects your stack