CVE - CVE-2024-42284

CVE-ID
CVE-2024-42284	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/253405541be2f15ffebdeac2f4cf4b7e9144d12f URL:https://git.kernel.org/stable/c/253405541be2f15ffebdeac2f4cf4b7e9144d12f MISC:https://git.kernel.org/stable/c/2abe350db1aa599eeebc6892237d0bce0f1de62a URL:https://git.kernel.org/stable/c/2abe350db1aa599eeebc6892237d0bce0f1de62a MISC:https://git.kernel.org/stable/c/5eea127675450583680c8170358bcba43227bd69 URL:https://git.kernel.org/stable/c/5eea127675450583680c8170358bcba43227bd69 MISC:https://git.kernel.org/stable/c/728734352743a78b4c5a7285b282127696a4a813 URL:https://git.kernel.org/stable/c/728734352743a78b4c5a7285b282127696a4a813 MISC:https://git.kernel.org/stable/c/76ddf84a52f0d8ec3f5db6ccce08faf202a17d28 URL:https://git.kernel.org/stable/c/76ddf84a52f0d8ec3f5db6ccce08faf202a17d28 MISC:https://git.kernel.org/stable/c/7ec3335dd89c8d169e9650e4bac64fde71fdf15b URL:https://git.kernel.org/stable/c/7ec3335dd89c8d169e9650e4bac64fde71fdf15b MISC:https://git.kernel.org/stable/c/aa38bf74899de07cf70b50cd17f8ad45fb6654c8 URL:https://git.kernel.org/stable/c/aa38bf74899de07cf70b50cd17f8ad45fb6654c8 MISC:https://git.kernel.org/stable/c/fa96c6baef1b5385e2f0c0677b32b3839e716076 URL:https://git.kernel.org/stable/c/fa96c6baef1b5385e2f0c0677b32b3839e716076
Assigning CNA
kernel.org
Date Record Created
20240730	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240730)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.