{"id":"CVE-2024-54159","aliases":["EUVD-2024-52323","GHSA-x839-278f-vq33","SUSE-SU-2025:20468-1","openSUSE-SU-2025:14886-1"],"status":"published","title":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp...","description":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.","severity":{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AC:H/AV:L/A:L/C:N/I:L/PR:N/S:C/UI:R","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00179,"percentile":0.07525,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2024-11-29T00:00:00Z","modified":"2026-06-17T08:09:52Z","fixes":[{"ecosystem":"SUSE:Linux Micro 6.1","package":"stalld","fixed_in":["1.19.8-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"stalld","fixed_in":["1.19.8-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"stalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.8-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"stalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.8-1.1"}]}]}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2024/11/29/3"},{"url":"https://security.opensuse.org/2024/11/29/stalld-fixed-tmp-file.html"},{"url":"https://cwe.mitre.org/data/definitions/61.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54159"},{"url":"https://github.com/advisories/GHSA-x839-278f-vq33"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520468-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230327","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-54159","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-54159","description":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.","status":"published","published":"2024-11-29T00:00:00Z","modified":"2024-12-03T14:58:31.046Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AC:H/AV:L/A:L/C:N/I:L/PR:N/S:C/UI:R","level":"medium","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:33:58.839967Z"}],"euvd":[{"id":"EUVD-2024-52323","description":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.","status":"published","published":"2024-11-29T00:00:00Z","modified":"2024-12-03T14:58:31Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AC:H/AV:L/A:L/C:N/I:L/PR:N/S:C/UI:R","level":"medium"}],"updated_at":"2026-11-03T00:04:42.176683Z"}],"ghsa":[{"id":"GHSA-x839-278f-vq33","title":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp...","description":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.","status":"published","published":"2024-11-30T00:32:14Z","modified":"2024-12-03T15:31:23Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:59:01.57352Z"}],"nvd":[{"id":"CVE-2024-54159","description":"stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.","status":"published","published":"2024-11-29T22:15:07.017Z","modified":"2026-06-17T08:09:52.827Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:10:38.973941Z"}],"osv":[{"id":"openSUSE-SU-2025:14886-1","title":"stalld-1.19.8-1.1 on GA media","description":"These are all security issues fixed in the stalld-1.19.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-12T00:00:00Z","modified":"2026-02-04T02:13:39.092783Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:20468-1","title":"Security update for stalld","description":"This update for stalld fixes the following issues:\n\nUpdate to 1.19.8.\n \nCheck https://gitlab.com/rt-linux-tools/stalld/-/releases\nfor the full list of changes.\n\nChanges since 1.19.6:\n\n  * Address CVE-2024-54159, which is a DoS issue with the way\n    throttlectl.sh uses temp files (bsc#1230327)\n  * Fix a compilation issue with a prototype mis-match in\n    stalld.h and utils.c for cleanup_regex()\n  * Workaround missing sched_getattr() export from glibc\n  * Fix a problem with parsing /sys/kernel/debug/sched/debug on\n    aarch64\n\n- Place the original scheduling values in a root-owned directory in\n  /run/stalld, not into the public /tmp directory (bsc#1230327).\n\n","status":"published","published":"2025-07-04T09:22:50Z","modified":"2026-03-23T04:48:58.17273Z","updated_at":"2026-11-02T15:53:59.92114Z"}]}}