« Volver al listado

CVE-2024-42381

Estado: AplazadaAlta (8.3)—

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which occurs before a user would expect execution of downloaded package content. (237d1e783f7ee261beaba7d3f6bde22da7148b0a was the tested vulnerable version.)

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Homebrew — BrewAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-42381",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-42381",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-31T16:56:17.154538Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@mitre.org",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.3,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:homebrew:brew:*:*:*:*:*:*:*:*"
          ],
          "vendor": "homebrew",
          "product": "brew",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.2.20",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-07-31T06:15:02.130",
  "references": [
    {
      "url": "https://blog.trailofbits.com/2024/07/30/our-audit-of-homebrew/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://brew.sh/2024/07/30/homebrew-security-audit/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Homebrew/brew/commit/916b37388d3851a8a93a8e9b4adc38873680ead7",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Homebrew/brew/pull/17136",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Homebrew/brew/releases/tag/4.2.20",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Homebrew/brew/tree/237d1e783f7ee261beaba7d3f6bde22da7148b0a",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/trailofbits/publications/blob/master/reviews/2023-08-28-homebrew-securityreview.pdf",
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-830"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which occurs before a user would expect execution of downloaded package content. (237d1e783f7ee261beaba7d3f6bde22da7148b0a was the tested vulnerable version.)"
    },
    {
      "lang": "es",
      "value": " os/linux/elf.rb en Homebrew Brew anterior a 4.2.20 usa ldd para cargar archivos ELF obtenidos de fuentes no confiables, lo que permite a los atacantes lograr la ejecución de código a través de un archivo ELF con una sección .interp personalizada. NOTA: la ejecución de este código ocurriría durante una fase de reubicación binaria sin espacio aislado, que ocurre antes de que un usuario espere la ejecución del contenido del paquete descargado. (237d1e783f7ee261beaba7d3f6bde22da7148b0a fue la versión vulnerable probada)."
    }
  ],
  "lastModified": "2026-06-17T07:49:21.777",
  "sourceIdentifier": "cve@mitre.org"
}