CVE-2024-0901CWE-129

SEGV and out of bounds memory read from malicious packet

High · published March 25, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00694 · 52.4th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-03-25T22:37Z
EPSS history
Timeline
  • 25 MAR 22:37Z
    SEGV and out of bounds memory read from malicious packet
    cvelistv5