CVE-2024-45287
05.09.2024, 04:15
A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data.Enginsight
| Vendor | Product | Version |
|---|---|---|
| freebsd | freebsd | 13.0 ≤ 𝑥 < 13.3 |
| freebsd | freebsd | 13.3 |
| freebsd | freebsd | 13.3:p1 |
| freebsd | freebsd | 13.3:p2 |
| freebsd | freebsd | 13.3:p3 |
| freebsd | freebsd | 13.3:p4 |
| freebsd | freebsd | 13.3:p5 |
| freebsd | freebsd | 13.4:beta3 |
| freebsd | freebsd | 14.0 |
| freebsd | freebsd | 14.0:beta5 |
| freebsd | freebsd | 14.0:p1 |
| freebsd | freebsd | 14.0:p2 |
| freebsd | freebsd | 14.0:p3 |
| freebsd | freebsd | 14.0:p4 |
| freebsd | freebsd | 14.0:p5 |
| freebsd | freebsd | 14.0:p6 |
| freebsd | freebsd | 14.0:p7 |
| freebsd | freebsd | 14.0:p8 |
| freebsd | freebsd | 14.0:p9 |
| freebsd | freebsd | 14.0:rc3 |
| freebsd | freebsd | 14.0:rc4-p1 |
| freebsd | freebsd | 14.1 |
| freebsd | freebsd | 14.1:p1 |
| freebsd | freebsd | 14.1:p2 |
| freebsd | freebsd | 14.1:p3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-131 - Incorrect Calculation of Buffer SizeThe software does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
- CWE-190 - Integer Overflow or WraparoundThe software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.