CVE-2024-24890

Summary

CVE-2024-24890 is a newly disclosed OS Command Injection vulnerability affecting the openEuler gala-gopher software on Linux systems. The vulnerability is located in the ioprobe.C file within the ebpf.Probe directory, and it arises from an improper neutralization of special elements used in an OS command. This issue allows an attacker to inject commands, potentially leading to unauthorized system access or data theft. The vulnerability has been identified in gala-gopher versions up to and including 1.0.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.