HIGH
Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
Published Dec 13, 2024
8.3
HIGHCVSS 4.0
EPSS 0.34%
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.
Affected products
-
Affected
- ≥ 4.4, < 5.3.1.45
- ≥ 6.0.0, < 6.0.1.40
- ≥ 6.1.0, < 6.1.2.21
- ≥ 7.0.0, < 7.3.0.5
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| RTI | Connext Professional | unaffected | Affected
|
OR
- ≥ 4.4 · < 5.3.1.45
- ≥ 6.0.0 · < 6.0.1.40
- ≥ 6.1.0 · < 6.1.2.21
- ≥ 7.0.0 · < 7.3.0.5
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46106 Advisory
- https://www.rti.com/vulnerabilities/#cve-2024-52063 Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46106 | Advisory | |
| https://www.rti.com/vulnerabilities/#cve-2024-52063 | Vendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner RTI
Published Dec 13, 2024
Updated Feb 7, 2025
Reserved Nov 5, 2024
Link CVE-2024-52063
CISA Vulnrichment
Updated Dec 16, 2024
Red Hat
No data
GitHub
No data