Vulnerability · Published Oct 31, 2024 · Assigned by VulDB

CVE-2024-10559SourceCodester Airport Booking Management System details buffer overflow

Medium 5.3

In plain English

A medium-severity buffer overflow in Airport Booking Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.4%top 66.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Airport Booking Management System	1.0

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-282560 | SourceCodester Airport Booking Management System details buffer overflow vdb-entry, technical-description
VDB-282560 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #433262 | SourceCodester Airport Booking Management System in C with Source Code 1.0 Buffer Overflow third-party-advisory
https://github.com/CveSecLook/cve/issues/64 exploit, issue-tracking
https://www.sourcecodester.com/ product