CVE-2024-53426

CVSS 3.1 Score 6.2 of 10 (medium)

Details

Published Nov 21, 2024
Updated: Nov 26, 2024
CWE ID 120

Summary

CVE-2024-53426 is a recently disclosed vulnerability that impacts the Flow::dissectMDNS function in ntopng version 6.2. This issue is classified as a heap-buffer-overflow vulnerability, which means that an attacker could potentially manipulate data and cause the buffer to overflow, leading to unintended program behavior. The consequences of this vulnerability could range from denial-of-service attacks to remote code execution. As a result, it is highly recommended that users of ntopng 6.2 upgrade to a patched version as soon as possible to mitigate the risk of exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share