Description
An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function.
References (3)
Core 3
Core References
Patch, Third Party Advisory
https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2024-57493
Exploit, Issue Tracking
https://gitlab.redox-os.org/redox-os/relibc/-/issues/201
Scores
CVSS v3
5.5
EPSS
0.0006
EPSS Percentile
19.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-404
Status
published
Products (1)
redox-os/redox
0.8.0
Published
Apr 18, 2025
Tracked Since
Feb 18, 2026