CVE-2024-23849

MEDIUM Year: 2024
CVSS v3 Score
5.5
Medium
Weakness Type
CWE-193
View all →

Vulnerability Description

In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.

Related Vulnerabilities

CVE-2001-1391

MEDIUM
CVSS:5.5(Medium)

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

CWE-1932001

CVE-2004-0342

MEDIUM
CVSS:5.5(Medium)

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 ch...

CWE-1932004

CVE-2017-2618

MEDIUM
CVSS:5.5(Medium)

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to a...

CWE-1932017

CVE-2019-9209

MEDIUM
CVSS:5.5(Medium)

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with ex...

CWE-1932019

CVE-2021-44007

MEDIUM
CVSS:5.5(Medium)

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing...

CWE-1932021

CVE-2021-47373

MEDIUM
CVSS:5.5(Medium)

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an o...

CWE-1932021