Wind River Support Network

HomeDefectsLIN1019-13138
Fixed

LIN1019-13138 : Security Advisory - go - CVE-2024-24789

Created: May 22, 2024    Updated: Dec 11, 2024
Resolved Date: Sep 10, 2024
Found In Version: 10.19.45.1
Fix Version: 10.19.45.32
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

https://nvd.nist.gov/vuln/detail/CVE-2024-24789

CVEs


Live chat
Online