CVE-2024-52533

CriticalCVSS 9.8/10Last modified Oct 15, 2026

Description

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
n/an/an/a
gnomeglib< 2.82.1
SiemensRUGGEDCOM RST2428P< V3.3
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family< V3.3
SiemensSCALANCE XCH328< V3.3
SiemensSCALANCE XCM324< V3.3
SiemensSCALANCE XCM328< V3.3
SiemensSCALANCE XCM332< V3.3
SiemensSCALANCE XRH334 (24 V DC, 8xFO, CC)< V3.3
SiemensSCALANCE XRM334 (230 V AC, 12xFO)< V3.3
SiemensSCALANCE XRM334 (230 V AC, 8xFO)< V3.3
SiemensSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)< V3.3
SiemensSCALANCE XRM334 (24 V DC, 12xFO)< V3.3
SiemensSCALANCE XRM334 (24 V DC, 8xFO)< V3.3
SiemensSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)< V3.3
SiemensSCALANCE XRM334 (2x230 V AC, 12xFO)< V3.3
SiemensSCALANCE XRM334 (2x230 V AC, 8xFO)< V3.3
SiemensSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)< V3.3
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensRUGGEDCOM ROX MX5000< V2.17.0
SiemensRUGGEDCOM ROX MX5000RE< V2.17.0
SiemensRUGGEDCOM ROX RX1400< V2.17.0
SiemensRUGGEDCOM ROX RX1500< V2.17.0
SiemensRUGGEDCOM ROX RX1501< V2.17.0
SiemensRUGGEDCOM ROX RX1510< V2.17.0
SiemensRUGGEDCOM ROX RX1511< V2.17.0
SiemensRUGGEDCOM ROX RX1512< V2.17.0
SiemensRUGGEDCOM ROX RX1524< V2.17.0
SiemensRUGGEDCOM ROX RX1536< V2.17.0
SiemensRUGGEDCOM ROX RX5000< V2.17.0

References

Timeline

Published
Nov 11, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-525345.4Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker wiCVE-2024-525358.8Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symboliCVE-2024-525376.7Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local accesCVE-2024-525388.8Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization CVE-2024-52545.4The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_banner shoCVE-2024-525418.2Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploCVE-2024-525425.5Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could CVE-2024-525434.4Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attaCVE-2024-525449.8An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerability has been resolveCVE-2024-525456.5An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876). This vulnerability has been resolved iCVE-2024-525465.3An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolveCVE-2024-525477.2An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80). This vulnerability has been resolved
CVE-2024-52533: Critical severity, CVSS 9.8 | Vulnix