CVE-2024-24192

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jun 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-241947.5robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c.CVE-2024-241957.5robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.CVE-2024-241987.5smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c.CVE-2024-241997.5smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.CVE-2024-24209.8LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and includingCVE-2024-242029.8An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 alCVE-2024-24219.8LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and includinCVE-2024-242139.8Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component /pg_meta/default/query. NOTE: the vendorCVE-2024-242155.3An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information vCVE-2024-242169.8Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/mCVE-2024-24228.8LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including CVE-2024-24236.4The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnera
CVE-2024-24192: Critical severity, CVSS 9.1 | Vulnix