CVE-2024-37571

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Buffer Overflow vulnerability in SAS Broker 9.2 build 1495 allows attackers to cause denial of service or obtain sensitive information via crafted payload to the '_debug' parameter.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jun 26, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-375738.4The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application (with no permissions) to place phone cal CVE-2024-375748.2The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application (with no permissions) to place phone calls wi CVE-2024-375757.5The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place ph CVE-2024-37587.8in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.CVE-2024-37597.8in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.CVE-2024-37607.5In lunary-ai/lunary version 1.2.7, there is a lack of rate limiting on the forgot password page, leading to an email bombing vulnerability. CVE-2024-376006.8An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Bro CVE-2024-376014.6An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap buffer overflow exists in the user data import/e CVE-2024-376024.6An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible NULL pointer dereference in the Apple Ca CVE-2024-376034.6An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type confusion exists in the user data import/export CVE-2024-376056.5A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted CVE-2024-376066.5A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HT