Lucene search

NozomiCVE-2024-31175

HistorySep 18, 2024 - 2:15 p.m.

CVE-2024-31175

2024-09-1814:15:14

CWE-690

CWE-476

Nozomi

web.nvd.nist.gov

cve-2024-31175

open networking foundation

libfluid

tablepropertieslist

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TablePropertiesList::unpack.

This issue affects libfluid: 0.1.0.

Affected configurations

Nvd

Node

opennetworkinglibfluid_msgMatch0.1.0

VendorProductVersionCPE
opennetworkinglibfluid_msg0.1.0cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	libfluid_msg	0.1.0	cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:::::::*

CNA Affected

[
  {
    "collectionURL": "https://opennetworkingfoundation.github.io/libfluid/",
    "defaultStatus": "unaffected",
    "modules": [
      "libfluid_msg"
    ],
    "product": "libfluid",
    "programRoutines": [
      {
        "name": "fluid_msg::of13::TablePropertiesList::unpack"
      }
    ],
    "vendor": "Open Networking Foundation (ONF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.1.0"
      }
    ]
  }
]

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31175

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-31175