Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tung Nguyen

Researcher fromEndava
#32540of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2024-7195
7.8
2024-07-24
Linux · Linux Kernel · CVE-2024-42284
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.50 **Description** The issue is related to a buffer overflow in the `tipc udp addr2str()` function in the Linux kernel's TIPC (Transparent Inter Process Communication) protocol implementation. This can occur when an invalid UDP media address is provided, potentially leading to a buffer overflow access in `tipc media addr printf()`. The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider modifying the `tipc udp addr2str()` function to return a non-zero value when an invalid UDP media address is encountered, thus preventing the buffer overflow access in `tipc media addr printf()`.