← Back

CVE-2024-52533

nvd nist
Published: Nov 11, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Affected (4)

Gnome
1 product
Glib
Debian
1 product
Debian Linux
Netapp
2 products
Active Iq Unified Manager
Ontap Tools
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Glib
Before 2.82.1
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 11.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
Ontap Tools
Version 10

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (6)

Source: cve@mitre.org
ExploitIssue Tracking
Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.