A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | freebsd-upgrade-package-oauth2-proxyfreebsd-upgrade-base-14_1-release-p4freebsd-upgrade-base-14_0-release-p10freebsd-upgrade-base-13_3-release-p6 | Oct 18, 2024 | Oct 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
