How severe is CVE-2024-1048?

This vulnerability has a severity rating of LOW with a CVSS score of 3.3 out of 10.

What type of vulnerability is CVE-2024-1048?

This is classified as CWE-459, which is a common weakness in software security.

CVE-2024-1048 - LOW Severity | CVSS 3.3

Vulnerability Description

A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Related Vulnerabilities

CVE-2022-2307

LOW

CVSS:3.8(Low)

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows...

CWE-4592022

CVE-2023-2400

LOW

CVSS:2.7(Low)

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access.

CWE-4592023

CVE-2018-11068

LOW

CVSS:3.9(Low)

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.

CWE-4592018

CVE-2019-8548

LOW

CVSS:2.4(Low)

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in wa...

CWE-4592019

CVE-2019-8732

LOW

CVSS:2.4(Low)

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.

CWE-4592019

CVE-2018-12332

MEDIUM

CVSS:4.2(Medium)

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.

CWE-4592018