CVE-2024-52060

HIGH

RTI Connext Professional <7.3.0.5, <6.1.2.21, <6.0.* - Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0050
EPSS Percentile 66.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-120
Status published
Products (1)
rti/connext_professional 5.3.0 - 5.3.1.45
Published Dec 13, 2024
Tracked Since Feb 18, 2026