Lucene search

[email protected]NVD:CVE-2024-23916

HistorySep 18, 2024 - 2:15 p.m.

CVE-2024-23916

2024-09-1814:15:12

CWE-476

CWE-690

[email protected]

web.nvd.nist.gov

vulnerability

open networking foundation

libfluid

null pointer dereference

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

JSON

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionSet::unpack.

This issue affects libfluid: 0.1.0.

Affected configurations

Nvd

Node

opennetworkinglibfluid_msgMatch0.1.0

VendorProductVersionCPE
opennetworkinglibfluid_msg0.1.0cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	libfluid_msg	0.1.0	cpe:2.3:a:opennetworking:libfluid_msg:0.1.0:::::::*

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23916

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

JSON

Related for NVD:CVE-2024-23916

vulnrichment1 cve1 cvelist1