CVE-2024-45289 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option.

Reserved 2024-08-26 | Published 2024-11-12 | Updated 2024-11-13 | Assigner freebsd

Problem types

CWE-665 Improper Initialization

Product status

Default status

unknown

14.1-RELEASE before p6

affected

13.4-RELEASE before p2

affected

13.3-RELEASE before p8

affected

Credits

Franco Fichtner finder

References

security.freebsd.org/advisories/FreeBSD-SA-24:18.ctl.asc vendor-advisory

cve.org (CVE-2024-45289)

nvd.nist.gov (CVE-2024-45289)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-45289

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.