Products
Open Networking Foundation (ONF) libfluid (libfluid_msg module)
- 0.1.0
Source
prodsec@nozominetworks.com
Tags
CVE-2024-31165 details
Published : Sept. 18, 2024, 2:15 p.m.
Last Modified : Sept. 18, 2024, 2:15 p.m.
Last Modified : Sept. 18, 2024, 2:15 p.m.
Description
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0.
CVSS Score
| 1 | 2 | 3 | 4 | 5.3 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-690 | Unchecked Return Value to NULL Pointer Dereference | The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Base Score
5.3
Exploitability Score
3.9
Impact Score
1.4
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
| URL | Source |
|---|---|
| https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31165 | prodsec@nozominetworks.com |
This website uses the NVD API, but is not approved or certified by it.