CVE-2024-45288

Summary

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.

Affected Software

Weaknesses

• CWE-170: CWE-170: Improper Null Termination
• CWE-787: CWE-787 Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://security.netapp.com/advisory/ntap-20240920-0008/

References

• https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc

• ←Previous
• Next→