{"schemaVersion":3,"id":"CVE-2024-10977","aliases":["ALPINE-CVE-2024-10977","UBUNTU-CVE-2024-10977","DEBIAN-CVE-2024-10977","CGA-33vf-v8rv-xwwm","CGA-3x95-qcv3-cwgm","CGA-4h78-69q5-hw97","CGA-6733-wc87-2q43","CGA-7grc-4vvr-xm62","CGA-8687-gv8w-gp2g","CGA-f57f-2mrc-47mr","CGA-jw8f-9rmx-2jjf","CGA-m4xq-wjq2-9x5x","CGA-mprp-3j53-8wm6","CGA-prcx-q3r7-rfgm","CGA-qf8c-hvm8-4xgm","CGA-r4w9-87p4-2xhc","CGA-vwwv-97jc-c64g","CGA-wwqh-q8q9-qp45"],"status":"published","duplicateOf":null,"title":null,"description":"Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application.  For example, a man-in-the-middle attacker could send a long error message that a human or screen-scraper user of psql mistakes for valid query results.  This is probably not a concern for clients where the user interface unambiguously indicates the boundary between one error message and other text.  Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.","dates":{"published":"2024-11-14T13:00:05.715Z","modified":"2025-11-03T21:51:38.414Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.7,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00375,"percentile":0.30083,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.0029999999999999645,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00372},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00375,"percentile":0.30083}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00372,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00375,"percentile":0.30083}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-348","name":"Use of Less Trusted Source","description":"The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/348.html"},{"id":"CWE-345","name":"Insufficient Verification of Data Authenticity","description":"The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/345.html"}],"affected":[{"vendor":"alpine","product":"postgresql14","name":"postgresql14","label":"postgresql14","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql15","name":"postgresql15","label":"postgresql15","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql16","name":"postgresql16","label":"postgresql16","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql17","name":"postgresql17","label":"postgresql17","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.24-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15-client","purlType":"apk","versions":[{"text":"< 15.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.19-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.24-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15-client","purlType":"apk","versions":[{"text":"< 15.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.19-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-15","purlType":"deb","versions":[{"text":"< 15.9-0+deb12u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-0+deb12u1","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-17","purlType":"deb","versions":[{"text":"< 17.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-10","name":"postgresql-10","label":"postgresql-10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-12","purlType":"deb","versions":[{"text":"< 12.22-0ubuntu0.20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.22-0ubuntu0.20.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-14","purlType":"deb","versions":[{"text":"< 14.15-0ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.15-0ubuntu0.22.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-16","purlType":"deb","versions":[{"text":"< 16.6-0ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.6-0ubuntu0.24.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.3","name":"postgresql-9.3","label":"postgresql-9.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.5","name":"postgresql-9.5","label":"postgresql-9.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.5","purlType":"deb","versions":[{"text":"< 9.5.25-0ubuntu0.16.04.1+esm10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.25-0ubuntu0.16.04.1+esm10","eol":null,"hubHref":null},{"vendor":"postgresql","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 12.0, < 12.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 13.0, < 13.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 14.0, < 14.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 15.0, < 15.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.0, < 16.5","noFixRecorded":false,"fixedIn":null},{"text":"17.0","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta1","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta2","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta3","noFixRecorded":false,"fixedIn":null},{"text":"17.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 12.0, < 12.21 | ≥ 13.0, < 13.17 | ≥ 14.0, < 14.14 | ≥ 15.0, < 15.9 | ≥ 16.0, < 16.5 | 17.0 | 17.0:beta1 | 17.0:beta2 | 17.0:beta3 | 17.0:rc1","eol":{"isEol":false,"eolDate":"2029-11-08T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"17","label":"17","eolFrom":"2029-11-08T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"17.11"},"product":{"name":"postgresql","label":"PostgreSQL","category":"database"}},"hubHref":"/vendor/postgresql/postgresql"}],"affectedCount":29,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.postgresql.org/support/security/CVE-2024-10977/","label":"www.postgresql.org/support/security/CVE-2024-10977/","hostname":"www.postgresql.org","tags":["REPORT","Advisory","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00011.html","label":"lists.debian.org/debian-lts-announce/2024/11/msg00011.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-10977","label":"security.alpinelinux.org/vuln/CVE-2024-10977","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-10977","label":"ubuntu.com/security/CVE-2024-10977","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10977","label":"www.cve.org/CVERecord?id=CVE-2024-10977","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7132-1","label":"ubuntu.com/security/notices/USN-7132-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7358-1","label":"ubuntu.com/security/notices/USN-7358-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-10977","label":"security-tracker.debian.org/tracker/CVE-2024-10977","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10977","label":"nvd.nist.gov/vuln/detail/CVE-2024-10977","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3954-1","DSA-5812-1","MGASA-2024-0372","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"],"duplicates":[],"related":["CGA-3FQ6-H99W-G5M2","CGA-3V8V-336X-VWV3","CGA-59PC-23MH-J555","CGA-CXFH-VGH7-MVWG","CGA-GR6W-3V33-RV6J","CGA-JV6C-GF5M-6HVP","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"]},"timeline":[{"kind":"published","date":"2024-11-14T13:00:05.715Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T21:51:38.414Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":15,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T15:33:35.339Z","stale":false,"partial":false}}