Wind River Support Network

HomeDefectsLIN1022-8970
Fixed

LIN1022-8970 : Security Advisory - go - CVE-2024-24789

Created: May 22, 2024    Updated: Sep 18, 2024
Resolved Date: Sep 15, 2024
Found In Version: 10.22.33.1
Fix Version: 10.22.33.19
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

https://nvd.nist.gov/vuln/detail/CVE-2024-24789

CVEs


Live chat
Online