CVE-2024-54159

Summary

CVE-2024-54159 is a newly discovered vulnerability affecting versions of stalld prior to 1.19.7. This issue enables local users to execute a file overwrite attack through the creation of a symlink in the /tmp/rtthrottle directory. Consequently, a denial of service condition can be triggered, disrupting the normal functioning of the stalld service. The vulnerability underscores the importance of maintaining up-to-date software installations to safeguard against potential security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.