CVE-2024-48075

MEDIUM Year: 2024
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-120
View all →

Vulnerability Description

A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL from 09/09/24 and earlier allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message.

Related Vulnerabilities

CVE-2018-14788

MEDIUM
CVSS:5.3(Medium)

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types.

CWE-1202018

CVE-2020-26422

MEDIUM
CVSS:5.3(Medium)

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file

CWE-1202020

CVE-2020-4465

MEDIUM
CVSS:5.3(Medium)

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker cou...

CWE-1202020

CVE-2020-4869

MEDIUM
CVSS:5.3(Medium)

IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a specially crafted SNMP query to cause the appliance to reload. IBM...

CWE-1202020

CVE-2020-7120

MEDIUM
CVSS:5.3(Medium)

A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow...

CWE-1202020

CVE-2021-29297

MEDIUM
CVSS:5.3(Medium)

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack t...

CWE-1202021