Lucene search

NozomiCVE-2024-31185

HistorySep 18, 2024 - 2:15 p.m.

CVE-2024-31185

2024-09-1814:15:16

CWE-690

CWE-476

Nozomi

web.nvd.nist.gov

cve-2024-31185

open networking foundation

unchecked return value

vulnerability

meterbandlist

unpack

libfluid

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterBandList::unpack.

This issue affects libfluid: 0.1.0.

Affected configurations

Nvd

Node

opennetworkinglibfluid_msgMatch0.1.0

VendorProductVersionCPE
opennetworkinglibfluid_msg0.1.0cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	libfluid_msg	0.1.0	cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:::::::*

CNA Affected

[
  {
    "collectionURL": "https://opennetworkingfoundation.github.io/libfluid/",
    "defaultStatus": "unaffected",
    "modules": [
      "libfluid_msg"
    ],
    "product": "libfluid",
    "programRoutines": [
      {
        "name": "fluid_msg::QueuePropertyList::unpack10"
      }
    ],
    "vendor": "Open Networking Foundation (ONF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.1.0"
      }
    ]
  }
]

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31185

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-31185