PT-2024-23840 · Open Networking Foundation · Libfluid

Gabriele Quagliarella · Published 2024-09-18 · Updated 2024-09-20 · CVE-2024-31197

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libfluid version 0.1.0

Description The issue is related to an Improper Null Termination vulnerability in the libfluid msg module of the Open Networking Foundation (ONF) libfluid. This vulnerability is associated with the program routine fluid msg::of10::Port:unpack.

Recommendations For libfluid version 0.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-170

Related Identifiers

CVE-2024-31197

Affected Products

Libfluid

References · 5

• https://osv.dev/vulnerability/CVE-2024-31197 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31197 · Security Note
• https://t.me/cvedetector/5962 · Telegram Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2024-31197 · Note
• https://twitter.com/CVEnew/status/1836413445295755673 · Twitter Post