Time-of-check Time-of-use (TOCTOU) Race Condition in PowerEdge Server BIOS and Precision Rack BIOS - CVE-2024-0163

Vulnerability details

The vulnerability allows a local user to gain access to gain access to otherwise unauthorized resources.

The vulnerability exists due to TOCTOU race condition. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

Affected software

How to mitigate CVE-2024-0163

External References

• https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability

Related Security Bulletins

• Time-of-check time-of-use (TOCTOU) race condition in Dell PowerEdge Server BIOS and Dell Precision Rack BIOS
• Multiple vulnerabilities in Dell APEX Cloud Platform for Red Hat OpenShift and Dell APEX Cloud Platform Foundation Software
• Multiple vulnerabilities in Dell PowerFlex Appliance