CVE-2024-45288 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Assigner	freebsd
Reserved	2024-08-26
Published	2024-09-05
Updated	2024-09-05

Description

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.

Problem types

CWE-170: Improper Null Termination

CWE-787 Out-of-bounds Write

Product status

Default status

0x40034a8980

14.1-RELEASE before p4

affected

14.0-RELEASE before p10

affected

13.3-RELEASE before p6

affected

Credits

Synacktiv 0x40034a8a20

References

https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc vendor-advisory

cve.org CVE-2024-45288

nvd.nist.gov CVE-2024-45288

Download JSON

https://cve.threatint.com/CVE/CVE-2024-45288

Subscribe to our newsletter to learn more about our work.