← All advisories

Critical severity9.8NVD Advisory· Published Jun 16, 2024· Updated Jun 17, 2026

CVE-2024-38462

CVE-2024-38462

Description

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Irods/Irods3 versions
cpe:2.3:a:irods:irods:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:irods:irods:*:*:*:*:*:*:*:*range: <4.3.2
- (no CPE)
- (no CPE)range: <4.3.2

Patches

Vulnerability mechanics

References

4

github.com/irods/irods/issues/7651nvdIssue TrackingPatch
github.com/irods/irods/blob/97eb33f130349db5e01a4b85e89dd1da81460345/server/re/src/mailMS.cppnvdProduct
github.com/irods/irods/issues/7562nvdIssue Tracking
irods.org/2024/05/irods-4-3-2-is-released/nvdRelease Notes

News mentions

0

No linked articles in our index yet.