{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-52061", "assignerOrgId": "3f572a00-62e2-4423-959a-7ea25eff1638", "state": "PUBLISHED", "assignerShortName": "RTI", "dateReserved": "2024-11-05T19:04:16.675Z", "datePublished": "2024-12-13T10:20:13.392Z", "dateUpdated": "2025-02-07T21:48:42.491Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Core Libraries", "Queuing Service", "Recording Service", "Routing Service"], "product": "Connext Professional", "vendor": "RTI", "versions": [{"lessThan": "7.5.0", "status": "affected", "version": "7.4.0", "versionType": "custom"}, {"lessThan": "7.3.0.5", "status": "affected", "version": "7.0.0", "versionType": "custom"}, {"lessThan": "6.1.2.21", "status": "affected", "version": "6.1.0", "versionType": "custom"}, {"lessThan": "6.0.1.40", "status": "affected", "version": "6.0.0", "versionType": "custom"}, {"lessThan": "5.3.1.45", "status": "affected", "version": "5.0.0", "versionType": "custom"}]}], "datePublic": "2024-12-12T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.<p>This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.</p>"}], "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45."}], "impacts": [{"capecId": "CAPEC-46", "descriptions": [{"lang": "en", "value": "CAPEC-46 Overflow Variables and Tags"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 8.3, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "3f572a00-62e2-4423-959a-7ea25eff1638", "shortName": "RTI", "dateUpdated": "2025-02-07T21:48:42.491Z"}, "references": [{"url": "https://www.rti.com/vulnerabilities/#cve-2024-52061"}], "source": {"discovery": "UNKNOWN"}, "title": "Potential stack buffer overflow when parsing an XML type", "x_generator": {"engine": "Vulnogram 0.2.0"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negated": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.4.0", "versionEndExcluding": "7.5.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.0.0", "versionEndExcluding": "7.3.0.5"}, {"vulnerable": true, "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.0", "versionEndExcluding": "6.1.2.21"}, {"vulnerable": true, "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.0.0", "versionEndExcluding": "6.0.1.40"}, {"vulnerable": true, "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0.0", "versionEndExcluding": "5.3.1.45"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-23T20:02:30.481034Z", "id": "CVE-2024-52061", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-23T20:02:44.507Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-52061", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-23T20:02:30.481034Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-23T20:02:40.565Z"}}], "cna": {"title": "Potential stack buffer overflow when parsing an XML type", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-46", "descriptions": [{"lang": "en", "value": "CAPEC-46 Overflow Variables and Tags"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "RTI", "modules": ["Core Libraries", "Queuing Service", "Recording Service", "Routing Service"], "product": "Connext Professional", "versions": [{"status": "affected", "version": "7.4.0", "lessThan": "7.5.0", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.3.0.5", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.2.21", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.1.40", "versionType": "custom"}, {"status": "affected", "version": "5.0.0", "lessThan": "5.3.1.45", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2024-12-12T16:00:00.000Z", "references": [{"url": "https://www.rti.com/vulnerabilities/#cve-2024-52061"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.", "supportingMedia": [{"type": "text/html", "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.<p>This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "cpeApplicability": [{"nodes": [{"negated": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.5.0", "versionStartIncluding": "7.4.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.3.0.5", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.2.21", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.0.1.40", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.3.1.45", "versionStartIncluding": "5.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "3f572a00-62e2-4423-959a-7ea25eff1638", "shortName": "RTI", "dateUpdated": "2025-02-07T21:48:42.491Z"}}}, "cveMetadata": {"cveId": "CVE-2024-52061", "state": "PUBLISHED", "dateUpdated": "2025-02-07T21:48:42.491Z", "dateReserved": "2024-11-05T19:04:16.675Z", "assignerOrgId": "3f572a00-62e2-4423-959a-7ea25eff1638", "datePublished": "2024-12-13T10:20:13.392Z", "assignerShortName": "RTI"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45."}], "id": "CVE-2024-52061", "lastModified": "2024-12-13T11:15:08.457", "metrics": {"cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "HIGH", "vulnerableSystemConfidentiality": "NONE", "vulnerableSystemIntegrity": "HIGH"}, "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "type": "Secondary"}]}, "published": "2024-12-13T11:15:08.457", "references": [{"source": "3f572a00-62e2-4423-959a-7ea25eff1638", "url": "https://www.rti.com/vulnerabilities/#cve-2024-52061"}], "sourceIdentifier": "3f572a00-62e2-4423-959a-7ea25eff1638", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "type": "Secondary"}]}

{}