CVE-2024-52065CWE-120

Potential stack buffer write overflow in Persistence Service while parsing malicious environment variable on non-Windows systems

Medium · published December 13, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional on non-Windows (Persistence Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.1.2 before 6.1.2.21, from 5.3.1.40 before 5.3.1.41.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-12-13T10:22Z
EPSS history
Timeline
  • 13 DEC 10:22Z
    Potential stack buffer write overflow in Persistence Service while parsing malicious environment variable on non-Windows systems
    cvelistv5