Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2024-30360 CVE-2024-45288 · GHSA-5hv9-vfr9-4mh3

Multiple vulnerabilities in libnv

Priority LOW 38

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00302 Published 2024-09-05 Fixed in p4, p10 +1 CWE-170
TI-2024-30359 CVE-2024-45287 · GHSA-mrwf-vh6j-2grj

Multiple vulnerabilities in libnv

Priority MEDIUM 40

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00511 Published 2024-09-05 Fixed in p4, p10 +1 CWE-131