PT-2024-23813
CVE-2024-31172
·
Published
2024-09-18
·
Updated
2024-09-20
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libfluid version 0.1.0
Description
The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation (ONF) libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid msg::of10::StatsReplyTable::unpack.
Recommendations
For libfluid version 0.1.0, consider disabling the fluid msg::of10::StatsReplyTable::unpack routine as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾