{"metadata": {"vulnerability": "CVE-2024-3174", "count": 20, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-04-01T22:45:51.857Z", "date_only": false, "value": "2024-04-01T22:45:51.857Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-3174", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:29.940Z", "date_only": false, "value": "2024-04-03T05:02:29.940289Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3174", "record": "GSD-2024-3174", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-07-16T22:14:03.618Z", "date_only": false, "value": "2024-07-16T22:14:03.618Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-3174", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-16T22:14:03.618Z", "date_only": false, "value": "2024-07-16T22:14:03.618Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2024-3174", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-16T23:15:24Z", "date_only": false, "value": "2024-07-16T23:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QW4M-QQ5C-43C6", "record": "GHSA-QW4M-QQ5C-43C6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-16T23:15:24.087Z", "date_only": false, "value": "2024-07-16T23:15:24.087", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3174", "record": "FKIE_CVE-2024-3174", "field": "published"}, {"timestamp": "2024-07-17T00:00:00Z", "date_only": true, "value": "2024-07-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-34505", "record": "CNVD-2024-34505", "field": "submitTime"}, {"timestamp": "2024-07-17T00:32:56Z", "date_only": false, "value": "2024-07-17T00:32:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QW4M-QQ5C-43C6", "record": "GHSA-QW4M-QQ5C-43C6", "field": "published"}, {"timestamp": "2024-07-17T02:19:54Z", "date_only": false, "value": "2024-07-17T02:19:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1029", "record": "CVE-2024-3174", "field": "creation_timestamp", "uuid": "dcf5f954-a074-4810-96bd-3485fc6a4a81", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3174 - \"Google Chrome V8 Object Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-3174 \nPublished : July 16, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1029"}, {"timestamp": "2024-07-17T15:31:25.912Z", "date_only": false, "value": "2024-07-17T15:31:25.912837Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-3174", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-07-17T15:31:25.912Z", "date_only": false, "value": "2024-07-17T15:31:25.912837Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3174", "record": "FKIE_CVE-2024-3174", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-18T15:31:19Z", "date_only": false, "value": "2024-07-18T15:31:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QW4M-QQ5C-43C6", "record": "GHSA-QW4M-QQ5C-43C6", "field": "modified"}, {"timestamp": "2024-08-01T20:05:07.611Z", "date_only": false, "value": "2024-08-01T20:05:07.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-3174", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-05T00:00:00Z", "date_only": true, "value": "2024-08-05", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-34505", "record": "CNVD-2024-34505", "field": "openTime"}, {"timestamp": "2025-03-20T14:40:52.636Z", "date_only": false, "value": "2025-03-20T14:40:52.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-3174", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-20T14:40:52.636Z", "date_only": false, "value": "2025-03-20T14:40:52.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-3174", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-20T15:18:20Z", "date_only": false, "value": "2025-03-20T15:18:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8208", "record": "CVE-2024-3174", "field": "creation_timestamp", "uuid": "818f9add-ba92-4c94-aceb-46408095f806", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3174\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udccf Published: 2024-07-16T22:14:03.618Z\n\ud83d\udccf Modified: 2025-03-20T14:40:52.636Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html\n2. https://issues.chromium.org/issues/40073339", "url": "https://t.me/DarkWebInformer_CVEAlerts/8208"}, {"timestamp": "2026-05-06T10:35:54Z", "date_only": false, "value": "2026-05-06T10:35:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/adegoodyer/4ac687c6d25980f02401cab22a2f9f9e", "record": "CVE-2024-3174", "field": "creation_timestamp", "uuid": "7632986e-7a68-4f87-8766-c08cd7c58a51", "content": "# Copy Fail Blocker\n- [Copy Fail Blocker](#copy-fail-blocker)\n  - [Overview](#overview)\n  - [Issue](#issue)\n  - [Resources](#resources)\n  - [Check Vulnerability](#check-vulnerability)\n  - [Deploy Copy Fail Blocker Viability](#deploy-copy-fail-blocker-viability)\n  - [Deploy Copy Fail Blocker](#deploy-copy-fail-blocker)\n  - [Remove Copy Fail Blocker](#remove-copy-fail-blocker)\n\n## Overview\n- BPF-LSM mitigation for the copy fail vulnerability (CVE-2024-3174) in the Linux kernel\n- DaemonSet attaches single BPF-LSM program to the socket_create hook on every node\n- [GitHub: copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker)\n\n## Issue\n- AWS haven't yet release an AMI that includes an upstream fix\n- upgrading to latest AMI version still has container version `kernel6.12-6.12.79-101.147.amzn2023` which is still vulnerable\n\n## Resources\n- [AWS Containers Roadmap](https://github.com/aws/containers-roadmap/issues/2808)\n- [ALSC Status updates](https://explore.alas.aws.amazon.com/CVE-2026-31431.html)\n\n## Check Vulnerability\n```bash\n# ssh into any EKS node\n\n# check for copy fail vulnerability\npython3 -c '\nimport socket\ntry:\n    socket.socket(socket.AF_ALG, socket.SOCK_SEQPACKET, 0)\n    print(\"FAIL: AF_ALG socket created - not protected\")\nexcept OSError as e:\n    print(\"OK:\", e)'\n\n# FAIL: AF_ALG socket created - not protected\n```\n\n## Deploy Copy Fail Blocker Viability\n```bash\n# check what BPF LSM is compiled in\ngrep CONFIG_BPF_LSM /boot/config-$(uname -r)\n# CONFIG_BPF_LSM=y\n\n# check bpf is in active LSM stack\ncat /sys/kernel/security/lsm\n# lockdown,capability,landlock,yama,safesetid,selinux,bpf,ima\n```\n\n## Deploy Copy Fail Blocker\n```bash\n# deploy copy fail blocker\nk  apply -f https://raw.githubusercontent.com/cozystack/copy-fail-blocker/v0.2.1/manifests/copy-fail-blocker.yaml\n\n# verify rollout\nk -n kube-system rollout status daemonset/copy-fail-blocker\n\n# verify copy fail is blocked\npython3 -c '\nimport socket\ntry:\n    socket.socket(socket.AF_ALG, socket.SOCK_SEQPACKET, 0)\n    print(\"FAIL: AF_ALG socket created - not protected\")\nexcept OSError as e:\n    print(\"OK:\", e)'\n\n# OK: [Errno 1] Operation not permitted\n```\n\n## Remove Copy Fail Blocker\n- remove once an AMI has been released with fix\n\n```bash\n# remove copy fail blocker\nk delete -f https://raw.githubusercontent.com/cozystack/copy-fail-blocker/v0.2.1/manifests/copy-fail-blocker.yaml\n```\n", "url": "https://gist.github.com/adegoodyer/4ac687c6d25980f02401cab22a2f9f9e"}, {"timestamp": "2026-05-06T11:19:12Z", "date_only": false, "value": "2026-05-06T11:19:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jpf-okteto/f82ba1e8aa47320b48288aa30a6192a9", "record": "CVE-2024-3174", "field": "creation_timestamp", "uuid": "66b72f44-7d8f-4715-85b5-b8903ab55c3e", "content": "# Copy Fail Blocker\n- [Copy Fail Blocker](#copy-fail-blocker)\n  - [Overview](#overview)\n  - [Issue](#issue)\n  - [Resources](#resources)\n  - [Check Vulnerability](#check-vulnerability)\n  - [Deploy Copy Fail Blocker Viability](#deploy-copy-fail-blocker-viability)\n  - [Deploy Copy Fail Blocker](#deploy-copy-fail-blocker)\n  - [Remove Copy Fail Blocker](#remove-copy-fail-blocker)\n\n## Overview\n- BPF-LSM mitigation for the copy fail vulnerability (CVE-2024-3174) in the Linux kernel\n- DaemonSet attaches single BPF-LSM program to the socket_create hook on every node\n- [GitHub: copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker)\n\n## Issue\n- AWS haven't yet release an AMI that includes an upstream fix\n- upgrading to latest AMI version still has container version `kernel6.12-6.12.79-101.147.amzn2023` which is still vulnerable\n\n## Resources\n- [AWS Containers Roadmap](https://github.com/aws/containers-roadmap/issues/2808)\n- [ALSC Status updates](https://explore.alas.aws.amazon.com/CVE-2026-31431.html)\n\n## Check Vulnerability\n```bash\n# ssh into any EKS node\n\n# check for copy fail vulnerability\npython3 -c '\nimport socket\ntry:\n    socket.socket(socket.AF_ALG, socket.SOCK_SEQPACKET, 0)\n    print(\"FAIL: AF_ALG socket created - not protected\")\nexcept OSError as e:\n    print(\"OK:\", e)'\n\n# FAIL: AF_ALG socket created - not protected\n```\n\n## Deploy Copy Fail Blocker Viability\n```bash\n# check what BPF LSM is compiled in\ngrep CONFIG_BPF_LSM /boot/config-$(uname -r)\n# CONFIG_BPF_LSM=y\n\n# check bpf is in active LSM stack\ncat /sys/kernel/security/lsm\n# lockdown,capability,landlock,yama,safesetid,selinux,bpf,ima\n```\n\n## Deploy Copy Fail Blocker\n```bash\n# deploy copy fail blocker\nk  apply -f https://raw.githubusercontent.com/cozystack/copy-fail-blocker/v0.2.1/manifests/copy-fail-blocker.yaml\n\n# verify rollout\nk -n kube-system rollout status daemonset/copy-fail-blocker\n\n# verify copy fail is blocked\npython3 -c '\nimport socket\ntry:\n    socket.socket(socket.AF_ALG, socket.SOCK_SEQPACKET, 0)\n    print(\"FAIL: AF_ALG socket created - not protected\")\nexcept OSError as e:\n    print(\"OK:\", e)'\n\n# OK: [Errno 1] Operation not permitted\n```\n\n## Remove Copy Fail Blocker\n- remove once an AMI has been released with fix\n\n```bash\n# remove copy fail blocker\nk delete -f https://raw.githubusercontent.com/cozystack/copy-fail-blocker/v0.2.1/manifests/copy-fail-blocker.yaml\n```\n", "url": "https://gist.github.com/jpf-okteto/f82ba1e8aa47320b48288aa30a6192a9"}, {"timestamp": "2026-06-17T07:43:27.893Z", "date_only": false, "value": "2026-06-17T07:43:27.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3174", "record": "FKIE_CVE-2024-3174", "field": "lastModified"}]}