by Kastro CVE-2024-52061
RTI Connext Professional — Potential stack buffer overflow when parsing an XML type
Description · from the CVE record
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.
Affected
ProductAffectedFixed inSource
Connext Professional7.4.0 – < 7.5.07.5.0CNA
Connext Professional7.0.0 – < 7.3.0.57.3.0.5CNA
Connext Professional6.1.0 – < 6.1.2.216.1.2.21CNA
Connext Professional6.0.0 – < 6.0.1.406.0.1.40CNA
Connext Professional5.0.0 – < 5.3.1.455.3.1.45CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
RTI (CNA)8.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial