‹ Volver al listado

CVE-2024-2193

Estado: AplazadaMedia (5.7)—PoC
Gravedad5.7Media · CVSS 3.1
Probabilidad de explotación1.28 %mayor que el 70 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoDisponiblePrueba de concepto en GitHub (no verificada)

Se ha revelado una vulnerabilidad de Speculative Race Condition (SRC) que afecta a modern CPU architectures que admiten la ejecución especulativa (relacionada con Spectre V1). Un atacante no autenticado puede aprovechar esta vulnerabilidad para revelar datos arbitrarios de la CPU utilizando condiciones de ejecución para acceder a las rutas de código ejecutable especulativas.

CVSS

Puntuación base
5.7
Versión
3.1
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
1.28 %
Percentil entre todas las CVEs puntuadas
70
Fecha de la puntuación
4/11/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

CWE

Referencias

Mostrar las 25 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-2193",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-2193",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-18T15:31:03.336472Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 0.5
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "AMD",
          "product": "CPU",
          "versions": [
            {
              "status": "affected",
              "version": "See advisory AMD-SB-7016"
            }
          ]
        },
        {
          "vendor": "Xen",
          "product": "Xen",
          "versions": [
            {
              "status": "affected",
              "version": "consult Xen advisory XSA-453"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-03-15T18:15:08.530",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/03/12/14",
      "source": "cret@cert.org"
    },
    {
      "url": "https://download.vusec.net/papers/ghostrace_sec24.pdf",
      "source": "cret@cert.org"
    },
    {
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=944d5fe50f3f03daacfea16300e656a1691c4a23",
      "source": "cret@cert.org"
    },
    {
      "url": "https://ibm.github.io/system-security-research-updates/2024/03/12/ghostrace",
      "source": "cret@cert.org"
    },
    {
      "url": "https://kb.cert.org/vuls/id/488902",
      "source": "cret@cert.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/",
      "source": "cret@cert.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/",
      "source": "cret@cert.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.html",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/488902",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.vusec.net/projects/ghostrace/",
      "source": "cret@cert.org"
    },
    {
      "url": "https://xenbits.xen.org/xsa/advisory-453.html",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/03/12/14",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://xenbits.xen.org/xsa/advisory-453.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://download.vusec.net/papers/ghostrace_sec24.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=944d5fe50f3f03daacfea16300e656a1691c4a23",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://ibm.github.io/system-security-research-updates/2024/03/12/ghostrace",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.cert.org/vuls/id/488902",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/488902",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.vusec.net/projects/ghostrace/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://xenbits.xen.org/xsa/advisory-453.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths."
    },
    {
      "lang": "es",
      "value": "Se ha revelado una vulnerabilidad de Speculative Race Condition (SRC) que afecta a modern CPU architectures que admiten la ejecución especulativa (relacionada con Spectre V1). Un atacante no autenticado puede aprovechar esta vulnerabilidad para revelar datos arbitrarios de la CPU utilizando condiciones de ejecución para acceder a las rutas de código ejecutable especulativas."
    }
  ],
  "lastModified": "2026-06-17T07:23:54.403",
  "sourceIdentifier": "cret@cert.org"
}