Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability Affects RTI Connext Professional

CVE-2024-52060

What is CVE-2024-52060?

A buffer overflow vulnerability exists in RTI Connext Professional products, including Routing Service, Recording Service, Queuing Service, Observability Collector Service, and Cloud Discovery Service. This vulnerability allows attackers to exploit buffer overflow conditions through environment variables, potentially leading to unauthorized access or service disruptions. Versions affected include Connext Professional from 7.0.0 before 7.3.0.5, 6.1.0 before 6.1.2.21, 6.0.0 before 6.0.*, and 5.3.0 before 5.3.1.45. Customers are advised to review their systems and apply necessary patches.

References