CISA-2024-42284 — Vulnetix

CISA-2024-42284 PUBLISHED

Reported by Linux · Published August 17, 2024

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.

Affected Products

Vendor	Product	Versions
Linux	Linux	d0f91938bede204a343473792529e0db7d599836, d0f91938bede204a343473792529e0db7d599836, d0f91938bede204a343473792529e0db7d599836
Linux	Linux	4.1, 0, 4.19.320
linux	linux_kernel	4.1, 4.1, 4.1
Linux	Linux	d0f91938bede204a343473792529e0db7d599836, d0f91938bede204a343473792529e0db7d599836, d0f91938bede204a343473792529e0db7d599836

Timeline

Aug 17, 2024 CVE Published
Nov 3, 2025 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html url
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html url

Open in Interactive Console →