漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability
Vulnerability Description
An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对无效指针或索引的释放
Vulnerability Title
Dell ControlVault3和Dell ControlVault3 Plus 安全漏洞
Vulnerability Description
Dell ControlVault3和Dell ControlVault3 Plus都是美国戴尔(Dell)公司的一款基于硬件的安全解决方案。 Dell ControlVault3 5.15.10.14之前版本和Dell ControlVault3 Plus 6.2.26.36之前版本存在安全漏洞,该漏洞源于cv_close功能存在任意释放漏洞。
CVSS Information
N/A
Vulnerability Type
N/A