CVE-2024-36982

🗓️ 01 Jul 2024 16:31:04Reported by SplunkType

In Splunk Enterprise and Splunk Cloud Platform, versions below 9.2.2, 9.1.5, and 9.0.10, and 9.1.2312.109 and 9.1.2308.207, a null pointer reference vulnerability in the cluster/config REST endpoint could lead to a Splunk daemon cras

Reporter	Title	Published	Views	Family All 9
CNNVD	Splunk 安全漏洞	1 Jul 202400:00	–	cnnvd
CNVD	Splunk Enterprise Null Pointer Dereference Vulnerability	5 Jul 202400:00	–	cnvd
Cvelist	CVE-2024-36982 Denial of Service through null pointer reference in “cluster/config” REST endpoint	1 Jul 202416:31	–	cvelist
EUVD	EUVD-2024-36370	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk	2 Jul 202413:15	–	ncsc
NVD	CVE-2024-36982	1 Jul 202417:15	–	nvd
Positive Technologies	PT-2024-27231 · Splunk · Splunk Cloud Platform +1	1 Jul 202400:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 9.0.0 < 9.0.10, 9.1.0 < 9.1.5, 9.2.0 < 9.2.2 (SVD-2024-0702)	2 Jul 202400:00	–	nessus
Vulnrichment	CVE-2024-36982 Denial of Service through null pointer reference in “cluster/config” REST endpoint	1 Jul 202416:31	–	vulnrichment

NVD

Node

splunk cloudRange9.1.2308–9.1.2308.207

splunk cloudRange9.1.2312.100–9.1.2312.109

splunk splunkRange9.0.0–9.0.10enterprise

splunk splunkRange9.1.0–9.1.5enterprise

splunk splunkRange9.2.0–9.2.2enterprise

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.2"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.5"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.10"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.1.2312",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.2312.109"
      },
      {
        "version": "9.1.2308",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.2308.207"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2024-0702

28 Feb 2025 11:03Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00345

SSVC

CWE-476