2024-09-05 06:03:16 +00:00
{
"id" : "CVE-2024-45287" ,
"sourceIdentifier" : "secteam@freebsd.org" ,
"published" : "2024-09-05T04:15:07.410" ,
2024-09-06 18:03:18 +00:00
"lastModified" : "2024-09-06T16:26:26.303" ,
"vulnStatus" : "Analyzed" ,
2024-09-05 06:03:16 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data."
2024-09-05 14:03:46 +00:00
} ,
{
"lang" : "es" ,
"value" : "Un valor malicioso de tama\u00f1o en una estructura de libnv empaquetada puede provocar un desbordamiento de enteros, lo que lleva a la asignaci\u00f3n de un b\u00fafer m\u00e1s peque\u00f1o que el requerido para los datos analizados."
2024-09-05 06:03:16 +00:00
}
] ,
2024-09-05 14:03:46 +00:00
"metrics" : {
"cvssMetricV31" : [
2024-09-06 18:03:18 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
} ,
2024-09-05 14:03:46 +00:00
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 9.1 ,
"baseSeverity" : "CRITICAL"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 5.2
}
]
} ,
2024-09-05 06:03:16 +00:00
"weaknesses" : [
2024-09-06 18:03:18 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-190"
}
]
} ,
2024-09-05 06:03:16 +00:00
{
"source" : "secteam@freebsd.org" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-131"
} ,
{
"lang" : "en" ,
"value" : "CWE-190"
}
]
}
] ,
2024-09-06 18:03:18 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.0" ,
"versionEndExcluding" : "13.3" ,
"matchCriteriaId" : "E82CE719-C11D-4C34-BDF9-5AA704884289"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "17DAE911-21E1-4182-85A0-B9F0059DDA7F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:p1:*:*:*:*:*:*" ,
"matchCriteriaId" : "ABEA48EC-24EA-4106-9465-CE66B938635F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:p2:*:*:*:*:*:*" ,
"matchCriteriaId" : "8DFB5BD0-E777-4CAA-B2E0-3F3357D06D01"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:p3:*:*:*:*:*:*" ,
"matchCriteriaId" : "BC8C769C-A23E-4F61-AC42-4DA64421B096"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:p4:*:*:*:*:*:*" ,
"matchCriteriaId" : "45B0589E-2E7D-4516-A8A0-88F30038EAB0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.3:p5:*:*:*:*:*:*" ,
"matchCriteriaId" : "C5CD8EF6-B119-488F-A278-8E9740E3E482"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:13.4:beta3:*:*:*:*:*:*" ,
"matchCriteriaId" : "2F52349C-6051-4CB9-8659-763A22C31640"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "FA25530A-133C-4D7C-8993-D5C42D79A0B5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB7B021E-F4AD-44AC-96AB-8ACAF8AB1B88"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:*" ,
"matchCriteriaId" : "69A72B5A-2189-4700-8E8B-1E5E7CA86C40"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p2:*:*:*:*:*:*" ,
"matchCriteriaId" : "5771F187-281B-4680-B562-EFC7441A8F88"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p3:*:*:*:*:*:*" ,
"matchCriteriaId" : "0A4437F5-9DDA-4769-974E-23BFA085E0DB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p4:*:*:*:*:*:*" ,
"matchCriteriaId" : "A9C3A3D4-C9F4-41EB-B532-821AF83470B1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p5:*:*:*:*:*:*" ,
"matchCriteriaId" : "878A1F0A-087F-47D7-9CA5-A54BB8D6676A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p6:*:*:*:*:*:*" ,
"matchCriteriaId" : "CE73CDC3-B5A7-4921-89C6-8F9DC426CB3E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p7:*:*:*:*:*:*" ,
"matchCriteriaId" : "50A5E650-31FB-45BE-8827-641B58A83E45"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p8:*:*:*:*:*:*" ,
"matchCriteriaId" : "D59CFDD3-AEC3-43F1-A620-0B1F0BAD9048"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:p9:*:*:*:*:*:*" ,
"matchCriteriaId" : "44B8A489-6314-460D-90DA-AFB54298C8E6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:*" ,
"matchCriteriaId" : "038E5B85-7F60-4D71-8D3F-EDBF6E036CE0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:*" ,
"matchCriteriaId" : "BF309824-D379-4749-A1FA-BCB2987DD671"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "79D770C6-7A57-4A49-8164-C55391F62301"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.1:p1:*:*:*:*:*:*" ,
"matchCriteriaId" : "AA813990-8C8F-4EE8-9F2B-9F73C510A7B2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.1:p2:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4DFA201-27D5-4C01-B90F-E24778943C3B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:freebsd:freebsd:14.1:p3:*:*:*:*:*:*" ,
"matchCriteriaId" : "01DD321B-E5E2-49F7-86A1-D40B13E257C7"
}
]
}
]
}
] ,
2024-09-05 06:03:16 +00:00
"references" : [
{
"url" : "https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc" ,
2024-09-06 18:03:18 +00:00
"source" : "secteam@freebsd.org" ,
"tags" : [
"Vendor Advisory"
]
2024-09-05 06:03:16 +00:00
}
]
}
