← CVE Intelligence

CVE-2024-52060

Potential stack overflow when using XML configuration file referencing environment variables PUBLISHED

Description (CNA)

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45.

Affected (CNA)

Vendor / productVersions
RTI / Connext Professionalaffected 7.0.0 before 7.3.0.5; affected 6.1.0 before 6.1.2.21; affected 6.0.0 before 6.0.1.40; affected 5.3.0 before 5.3.1.45

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.