Parallels Desktop up to 17.1.1 Toolgate heap-based overflow

Summaryinfo

A vulnerability identified as critical has been detected in Parallels Desktop. Affected is an unknown function of the component Toolgate. The manipulation leads to heap-based overflow. This vulnerability is traded as CVE-2024-6154. An attack has to be approached locally. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Parallels Desktop. This issue affects some unknown functionality of the component Toolgate. The manipulation with an unknown input leads to a heap-based overflow vulnerability. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. Was ZDI-CAN-20450.

The advisory is shared at zerodayinitiative.com. The identification of this vulnerability is CVE-2024-6154 since 06/18/2024. The exploitation is known to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

Upgrading to version 18.1.0 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Parallels

Name

• Desktop

Version

• 15.1.3-47255
• 15.1.4-47270
• 15.1.5-47309
• 16.0.1-4891
• 16.0.1-48919
• 16.1.0-48950
• 16.1.1-49141
• 16.1.2-49151
• 16.1.3-49160
• 16.5.0
• 16.5.1
• 17.1.1

License

• commercial

Website

• Vendor: https://www.parallels.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion