Wind River Support Network

HomeDefectsLIN1021-9534
Fixed

LIN1021-9534 : Security Advisory - go - CVE-2024-24789

Created: May 22, 2024    Updated: Sep 15, 2024
Resolved Date: Aug 12, 2024
Found In Version: 10.21.20.1
Fix Version: 10.21.20.24
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

https://nvd.nist.gov/vuln/detail/CVE-2024-24789

CVEs


Live chat
Online