QwikSec

Security Database

CVE

CWE

Training

CVE-2024-11588

Published: Nov 21, 2024

Modified: Nov 21, 2024

PUBLISHED

CVSS v3.1

3.5

LOW

Description

A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the function DoIPConnection::reactOnReceivedTcpMessage of the file DoIPConnection.cpp. The manipulation leads to null pointer dereference.

Vendor	Product	Versions
AVL-DiTEST-DiagDev	libdoip	affected `1.0.0`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

VDB-285659 | AVL-DiTEST-DiagDev libdoip DoIPConnection.cpp reactOnReceivedTcpMessage null pointer dereference

vdb-entry

technical-description

VDB-285659 | CTI Indicators (IOB, IOC, IOA)

signature

permissions-required

Submit #443175 | AVL-DiTEST-DiagDev libdoip libdoip==1.0.0 NULL Pointer Dereference

third-party-advisory

https://github.com/AVL-DiTEST-DiagDev/libdoip/issues/11

issue-tracking

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.