CVE Daily

CVE-2024-32930

In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosur...

Medium CVSS 5.5

Overview

In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE: CWE-665 Published: 2024-06-13T21:15:56.390
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.5 (MEDIUM)
  • Detected tags: info_leak (tag impact: LOW)

Recommended actions:

  • Reduce verbose errors, remove debug endpoints, minimize PII in logs.

Recommended tools

Tags