Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.4
CVE-2024-3979: COVESA vsomeip race condition
CVE-2024-3979 · published 2 years ago
Summary
A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. T...
Original advisory text
COVESA vsomeip race condition
A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261596.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3979.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-3979 Vendor Advisory
- https://vuldb.com/?id.261596 Vendor Advisory
- https://vuldb.com/?submit.312410 Vendor Advisory
- https://github.com/COVESA/vsomeip/issues/663 Third Party Advisory
- https://vuldb.com/?ctiid.261596 Third Party Advisory
- https://github.com/COVESA/vsomeip/files/14904610/details.zip Exploit
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-362Race Condition
Timeline
Published19 Apr 2024
Updated29 Oct 2026
First seen29 Sep 2026
Track software like this
Free during beta