mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
37 lines
1.3 KiB
JSON
37 lines
1.3 KiB
JSON
{
|
|
"id": "CVE-2024-38439",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-06-16T13:15:53.030",
|
|
"lastModified": "2024-06-30T12:15:02.293",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Netatalk 3.2.0 tiene un error de uno en uno y el resultado es un desbordamiento del b\u00fafer basado en el mont\u00f3n debido a la configuraci\u00f3n de ibuf[PASSWDLEN] en '\\0' en FPLoginExt al iniciar sesi\u00f3n en etc/uams/uams_pam.c."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://github.com/Netatalk/netatalk/blob/90d91a9ac9a7d6132ab7620d31c8c23400949206/etc/uams/uams_pam.c#L316",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://github.com/Netatalk/netatalk/issues/1096",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-8r68-857c-4rqc",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://netatalk.io/security/CVE-2024-38439",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |