CVE-2024-31185 NULL Pointer Dereference in libfluid_msg library
A NULL pointer dereference in the libfluid_msg library allows attackers to cause a denial of service via crafted OpenFlow messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-31185?
CVE-2024-31185 is a medium-severity vulnerability in Open Networking Foundation (ONF) libfluid, published on 18 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterBandList::unpack.
This issue affects libfluid: 0.1.0.
Which versions are affected by CVE-2024-31185?
It affects 1 product.
Products include Opennetworking Libfluid Msg.
How do I fix CVE-2024-31185?
No fix has been published for CVE-2024-31185 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-31185 being exploited?
There is no known exploitation of CVE-2024-31185 in the wild and no public exploit code.
Other vulnerabilities in Open Networking Foundation (ONF) libfluid
Sources
Also known as GHSA-4qrv-8qq4-m334.