by Kastro CVE-2024-42284
Linux Linux — tipc: Return non-zero value from tipc_udp_addr2str() on error
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.
Affected
ProductAffectedFixed inSource
Linuxd0f91938bede204a343473792529e0db7d599836 – < 7ec3335dd89c8d169e9650e4bac64fde71fdf15b7ec3335dd89c8d169e9650e4bac64fde71fdf15bCNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < 253405541be2f15ffebdeac2f4cf4b7e9144d12f253405541be2f15ffebdeac2f4cf4b7e9144d12fCNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < aa38bf74899de07cf70b50cd17f8ad45fb6654c8aa38bf74899de07cf70b50cd17f8ad45fb6654c8CNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < 5eea127675450583680c8170358bcba43227bd695eea127675450583680c8170358bcba43227bd69CNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < 728734352743a78b4c5a7285b282127696a4a813728734352743a78b4c5a7285b282127696a4a813CNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < 76ddf84a52f0d8ec3f5db6ccce08faf202a17d2876ddf84a52f0d8ec3f5db6ccce08faf202a17d28CNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < 2abe350db1aa599eeebc6892237d0bce0f1de62a2abe350db1aa599eeebc6892237d0bce0f1de62aCNA
Linuxd0f91938bede204a343473792529e0db7d599836 – < fa96c6baef1b5385e2f0c0677b32b3839e716076fa96c6baef1b5385e2f0c0677b32b3839e716076CNA
Linux4.14.19.320CNA
Scores by source
Linux (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial