In the Linux kernel, the following vulnerability has been resolved:
tcp_metrics: validate source addr length
I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at least 4 bytes long, and the policy doesn't have an entry
for this attribute at all (neither does it for IPv6 but v6 is
manually validated).
CVSS
No CVSS.
References
Configurations
No configuration.
History
30 Jul 2024, 13:32
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
30 Jul 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-30 08:15
Updated : 2024-07-30 13:32
NVD link : CVE-2024-42154
Mitre link : CVE-2024-42154
CVE.ORG link : CVE-2024-42154
JSON object : View
Products Affected
No product.
CWE
No CWE.