CVE-2024-45289 — Unbounded allocation in ctl(4) CAM Target Layer
The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass …
Published: 2024-11-12 · CVSS: 7.5 · CVSS 3.1
The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7