Lucene search

NozomiCVE-2024-23915

HistorySep 18, 2024 - 2:15 p.m.

CVE-2024-23915

2024-09-1814:15:12

CWE-476

CWE-690

Nozomi

web.nvd.nist.gov

cve-2024-23915 open networking foundation libfluid_msg 0.1.0 unchecked return value vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::of13::InstructionSet::unpack.

This issue affects libfluid: 0.1.0.

Affected configurations

Nvd

Node

opennetworkinglibfluid_msgMatch0.1.0

VendorProductVersionCPE
opennetworkinglibfluid_msg0.1.0cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	libfluid_msg	0.1.0	cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:::::::*

CNA Affected

[
  {
    "collectionURL": "https://opennetworkingfoundation.github.io/libfluid/",
    "defaultStatus": "unaffected",
    "modules": [
      "libfluid_msg"
    ],
    "product": "libfluid",
    "programRoutines": [
      {
        "name": "fluid_msg::of13::InstructionSet::unpack"
      }
    ],
    "vendor": "Open Networking Foundation (ONF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.1.0"
      }
    ]
  }
]

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23915

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-23915