CVE-2024-31196
Published: 18 September 2024
Summary
CVE-2024-31196 is a medium-severity Unchecked Return Value to NULL Pointer Dereference (CWE-690) vulnerability in Opennetworking Libfluid Msg. Its CVSS base score is 5.3 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 41.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-29100
Vulnerability details
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::ActionList::unpack10. This issue affects libfluid: 0.1.0.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unchecked return value leading to NULL pointer dereference allows remote unauthenticated network attacker to crash the libfluid component, enabling application-level DoS via exploitation.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.