We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-45288

Multiple vulnerabilities in libnv



Assignerfreebsd
Reserved2024-08-26
Published2024-09-05
Updated2024-09-05

Description

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.

Problem types

CWE-170: Improper Null Termination

CWE-787 Out-of-bounds Write

Product status

Default status
0x40034a8980

14.1-RELEASE before p4
affected

14.0-RELEASE before p10
affected

13.3-RELEASE before p6
affected

Credits

Synacktiv 0x40034a8a20

References

https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc vendor-advisory

cve.org CVE-2024-45288

nvd.nist.gov CVE-2024-45288

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-45288
Subscribe to our newsletter to learn more about our work.