Wind River Support Network

HomeDefectsLIN1023-6243
Fixed

LIN1023-6243 : Security Advisory - go - CVE-2024-24789

Created: May 22, 2024    Updated: Jul 30, 2024
Resolved Date: Jul 28, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.12
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

https://nvd.nist.gov/vuln/detail/CVE-2024-24789

CVEs


Live chat
Online