Summary
It was discovered that openNDS did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | opennds | 10.2.0+dfsg-1ubuntu0.24.04.1~esm1 |
Vulnerabilities 1
-
Medium 5.5
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
References
-
report
https://ubuntu.com/security/CVE-2024-25763