CVE-2024-10964
emqx neuron plugin_handle.c handle_add_plugin buffer overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
emqx neuron plugin_handle.c handle_add_plugin buffer overflow
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
Es wurde eine kritische Schwachstelle in emqx neuron bis 2.10.0 entdeckt. Es betrifft die Funktion handle_add_plugin in der Bibliothek cmd.library der Datei plugins/restful/plugin_handle.c. Mittels Manipulieren mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Als bestmögliche Massnahme wird Patching empfohlen.
| 2024-11-07: | Advisory disclosed |
| 2024-11-07: | VulDB entry created |
| 2024-11-07: | VulDB entry last update |
susu199 (VulDB User)
vuldb.com/?id.283410 (VDB-283410 | emqx neuron plugin_handle.c handle_add_plugin buffer overflow)
vuldb.com/?ctiid.283410 (VDB-283410 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.435372 (Submit #435372 | emqx neuron neuron version ≤ 2.10.0 Buffer Overflow)
github.com/emqx/neuron/issues/2280
github.com/emqx/neuron/pull/2286
github.com/...mmits/3e3a583d72548af1740b3e61a5eab3b628cc439e
Support options
