[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDX9ezkh1GEuC_0kXiQ2M-F45mgDGItRdMYpL_ztZczg":3,"g5a-risk:CVE-2024-38373":125},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":29,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":51,"references":52,"referencesCount":66,"weaknesses":67,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":29,"otxData":29,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":120,"notableEvents":121},"CVE-2024-38373","What is CVE-2024-38373?","FreeRTOS-Plus-TCP is a lightweight TCP\u002FIP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.","FreeRTOS-Plus-TCP is a lightweight TCP\u002FIP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Resp...","2024-06-24T17:15:10.83","2026-06-17T07:40:00.98",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":39,"CVSSMetricV2":40,"CVSSMetricV40":41},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:H","NETWORK","LOW","NONE","CHANGED","HIGH",9.6,"CRITICAL",null,3.1,5.8,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED",2.8,5.2,[],[],[],0.00615,[42,42,42,42,42,42,42],"High",[46],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"amazon","freertos-plus-tcp","*","cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*",1,[53,58,62,64],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002FFreeRTOS\u002FFreeRTOS-Plus-TCP\u002Freleases\u002Ftag\u002FV4.1.1","GitHub",[57],"Release Notes",{"url":59,"source":55,"tags":60},"https:\u002F\u002Fgithub.com\u002FFreeRTOS\u002FFreeRTOS-Plus-TCP\u002Fsecurity\u002Fadvisories\u002FGHSA-ppcp-rg65-58mv",[61],"Vendor Advisory",{"url":54,"source":55,"tags":63},[57],{"url":59,"source":55,"tags":65},[61],4,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":80,"status":73,"abstraction":81,"structure":75},"CWE-126","Buffer Over-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.","This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2024-38373? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-38373, a high severity cyber security vulnerability from 2024. FreeRTOS-Plus-TCP is a lightweight TCP\u002FIP stack for FreeRTO...","CVE-2024-38373, CVE-2024-38373 vulnerability, CVE-2024-38373 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, amazon security, freertos-plus-tcp vulnerability","\u002Fwhat-is\u002Fcve-2024-38373",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-38373","Cybersecurity","CVE-2024-38373, CVE-2024-38373 vulnerability, CVE-2024-38373 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":29,"Negate":29,"Nodes":112},[113],{"Operator":114,"Negate":83,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":117,"VersionStartExcluding":29,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":29},"17A4C4F8-3EC2-422D-BAC6-224E3FC2DEE5","4.0.0","4.1.1",[],[],{"lastModified":11,"cacheTime":123,"version":124},1793227257648,"2.0",{"score":126,"band":127,"action":128,"scoredAt":129},54,"Medium","Plan remediation","2026-10-28T07:02:48.858744+00:00"]