PT-2024-23818 · Open Networking Foundation · Libfluid

Gabriele Quagliarella · Published 2024-09-18 · Updated 2024-09-20 · CVE-2024-31177

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libfluid version 0.1.0

Description The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation (ONF) libfluid, specifically in the libfluid msg modules. It is associated with the program routines fluid msg::of13::TableFeaturePropActions::unpack. This vulnerability poses a risk of remote exploit.

Recommendations For libfluid version 0.1.0, patch immediately to mitigate the risk of exploitation. Additionally, monitor for signs of compromise.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-31177

Affected Products

Libfluid

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-31177 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31177 · Vendor Advisory
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2024-31177 · Note
• https://twitter.com/oktsec/status/1836429439825027516 · Twitter Post
• https://twitter.com/CVEnew/status/1836413466942620133 · Twitter Post
• https://t.me/cvenotify/95511 · Telegram Post