CVE-2024-22857

Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto MAXLEN_CFG_LINE(MAXLEN_PATH*4) + 1. So a check was missing in zlog_rule_new() while copying the record_name from file_path + 1 which caused the buffer overflow. An attacker can exploit this vulnerability to overwrite the zlog_record_fn record_func function pointer to get arbitrary code execution or potentially cause remote code execution (RCE).

• CWE-122

• https://github.com/HardySimpson/zlog/
• https://github.com/HardySimpson/zlog/blob/1a7b1a6fb956b92a4079ccc91f30da21f34ca063/src/rule.h#L30
• https://github.com/HardySimpson/zlog/pull/251
• https://www.cybersecurity-help.cz/vdb/SB2024022842
• https://www.ebryx.com/blogs/arbitrary-code-execution-in-zlog-cve-2024-22857
• https://github.com/HardySimpson/zlog/
• https://github.com/HardySimpson/zlog/blob/1a7b1a6fb956b92a4079ccc91f30da21f34ca063/src/rule.h#L30
• https://github.com/HardySimpson/zlog/pull/251
• https://www.cybersecurity-help.cz/vdb/SB2024022842
• https://www.ebryx.com/blogs/arbitrary-code-execution-in-zlog-cve-2024-22857

Published

Mar 7, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22851Directory Traversal Vulnerability in LiveConfig before v.2.5…7.5
• CVE-2024-22852D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-…9.8
• CVE-2024-22853D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded p…9.8
• CVE-2024-22854DOM-based HTML injection vulnerability in the main page of D…6.1
• CVE-2024-22855A cross-site scripting (XSS) vulnerability in the User Maint…5.4
• CVE-2024-22856A SQL injection vulnerability via the Save Favorite Search f…5.4
• CVE-2024-22859Cross-Site Request Forgery (CSRF) vulnerability in livewire …8.8
• CVE-2024-2286The Sky Addons for Elementor (Free Templates Library, Live C…5.4
• CVE-2024-22860Integer overflow vulnerability in FFmpeg before n6.1, allows…9.8
• CVE-2024-22861Integer overflow vulnerability in FFmpeg before n6.1, allows…7.5
• CVE-2024-22862Integer overflow vulnerability in FFmpeg before n6.1, allows…9.8
• CVE-2024-2287The Knight Lab Timeline plugin for WordPress is vulnerable t…6.4