CVE-2024-38462

2024-06-1616:15:09

Google

osv.dev

irods 4.3.2 cve-2024-38462 mail binary

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.

CPENameOperatorVersion
irodseq4.2.0
irodseq4.1.0
irodseq3.0.1b1
irodseq3.0.1
irodseq3.0.1rc1
irodseq3.0.1b2
irodseq3.0b1
irodseq4.0.0b2
irodseq3.0rc1
irodseq4.3.0

Name	Operator	Version
irods	eq	4.2.0
irods	eq	4.1.0
irods	eq	3.0.1b1
irods	eq	3.0.1
irods	eq	3.0.1rc1
irods	eq	3.0.1b2
irods	eq	3.0b1
irods	eq	4.0.0b2
irods	eq	3.0rc1
irods	eq	4.3.0

Rows per page:

1-10 of 211

References

github.com/irods/irods/blob/97eb33f130349db5e01a4b85e89dd1da81460345/server/re/src/mailMS.cpp#L94-L106

github.com/irods/irods/issues/7562

github.com/irods/irods/issues/7651

irods.org/2024/05/irods-4-3-2-is-released/