mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
29 lines
3.2 KiB
JSON
29 lines
3.2 KiB
JSON
{
|
|
"id": "CVE-2024-36010",
|
|
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"published": "2024-05-22T12:15:10.660",
|
|
"lastModified": "2024-11-21T09:21:25.650",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix string truncation warnings in igb_set_fw_version\n\nCommit 1978d3ead82c (\"intel: fix string truncation warnings\")\nfixes '-Wformat-truncation=' warnings in igb_main.c by using kasprintf.\n\ndrivers/net/ethernet/intel/igb/igb_main.c:3092:53: warning\uff1a\u2018%d\u2019 directive output may be truncated writing between 1 and 5 bytes into a region of size between 1 and 13 [-Wformat-truncation=]\n 3092 | \"%d.%d, 0x%08x, %d.%d.%d\",\n | ^~\ndrivers/net/ethernet/intel/igb/igb_main.c:3092:34: note\uff1adirective argument in the range [0, 65535]\n 3092 | \"%d.%d, 0x%08x, %d.%d.%d\",\n | ^~~~~~~~~~~~~~~~~~~~~~~~~\ndrivers/net/ethernet/intel/igb/igb_main.c:3092:34: note\uff1adirective argument in the range [0, 65535]\ndrivers/net/ethernet/intel/igb/igb_main.c:3090:25: note\uff1a\u2018snprintf\u2019 output between 23 and 43 bytes into a destination of size 32\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure.\n\nFix this warning by using a larger space for adapter->fw_version,\nand then fall back and continue to use snprintf."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: igb: corrige advertencias de truncamiento de cadenas en igb_set_fw_version Commit 1978d3ead82c (\"intel: corrige advertencias de truncamiento de cadenas\") corrige las advertencias '-Wformat-truncation=' en igb_main.c usando kasprintf. drivers/net/ethernet/intel/igb/igb_main.c:3092:53: \u00bfadvertencia? La salida de la directiva '%d' puede truncarse escribiendo entre 1 y 5 bytes en una regi\u00f3n de tama\u00f1o entre 1 y 13 [-Wformat-truncation= ] 3092 | \"%d.%d, 0x%08x, %d.%d.%d\", | ^~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: nota?argumento directivo en el rango [0, 65535] 3092 | \"%d.%d, 0x%08x, %d.%d.%d\", | ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: argumento note?directive en el rango [0, 65535] drivers/net/ethernet/intel/igb/igb_main.c:3090:25: \u00bfnota? Salida 'snprintf' entre 23 y 43 bytes en un destino de tama\u00f1o 32 kasprintf() devuelve un puntero a la memoria asignada din\u00e1micamente que puede ser NULL en caso de error. Corrija esta advertencia usando un espacio m\u00e1s grande para adaptador->fw_version y luego retroceda y contin\u00fae usando snprintf."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/c56d055893cbe97848611855d1c97d0ab171eccc",
|
|
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/c56d055893cbe97848611855d1c97d0ab171eccc",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |