Lucene search

NozomiCVE-2024-31194

HistorySep 18, 2024 - 2:15 p.m.

CVE-2024-31194

2024-09-1814:15:18

CWE-125

Nozomi

web.nvd.nist.gov

cve-2024-31194

onf

open networking foundation

libfluid

libfluid_msg

vulnerability

out-of-bounds read

multipartreplyportstats

unpack

0.1.0

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack.

This issue affects libfluid: 0.1.0.

Affected configurations

Nvd

Node

opennetworkinglibfluid_msgMatch0.1.0

VendorProductVersionCPE
opennetworkinglibfluid_msg0.1.0cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	libfluid_msg	0.1.0	cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:::::::*

CNA Affected

[
  {
    "collectionURL": "https://opennetworkingfoundation.github.io/libfluid/",
    "defaultStatus": "unaffected",
    "modules": [
      "libfluid_msg"
    ],
    "product": "libfluid",
    "programRoutines": [
      {
        "name": "fluid_msg::of13::GroupDesc::unpack"
      }
    ],
    "vendor": "Open Networking Foundation (ONF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.1.0"
      }
    ]
  }
]

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31194

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-31194