PT-2024-36788
CVE-2024-56319
·
تاريخ النشر
2024-12-18
·
تاريخ التحديث
2024-12-31
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Matter (aka connectedhomeip or Project CHIP) versions 1.4.0.0 and earlier, before e3277eb
Description
The issue is related to unlimited user label appends in a userlabel cluster, which can lead to a denial of service due to resource exhaustion.
Recommendations
For Matter (aka connectedhomeip or Project CHIP) versions 1.4.0.0 and earlier, before e3277eb, consider restricting the number of user label appends in a userlabel cluster to prevent resource exhaustion until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾