2024-12-19 00:58:47 +00:00
{
"id" : "CVE-2024-56319" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-12-18T23:15:18.373" ,
2024-12-31 21:03:45 +00:00
"lastModified" : "2024-12-31T20:16:08.380" ,
2024-12-29 03:03:44 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-12-19 00:58:47 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion)."
2024-12-22 03:03:49 +00:00
} ,
{
"lang" : "es" ,
"value" : "En Matter (tambi\u00e9n conocido como connectedhomeip o Project CHIP) hasta 1.4.0.0 antes de e3277eb, la adici\u00f3n ilimitada de etiquetas de usuario en un cl\u00faster de etiquetas de usuario puede provocar una denegaci\u00f3n de servicio (agotamiento de recursos)."
2024-12-19 00:58:47 +00:00
}
] ,
2024-12-31 21:03:45 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
2024-12-19 00:58:47 +00:00
"weaknesses" : [
{
"source" : "cve@mitre.org" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-770"
}
]
}
] ,
"references" : [
{
"url" : "https://github.com/project-chip/connectedhomeip/commit/e3277eb02ed8115de5887e8beca0e35007ba71f3" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/project-chip/connectedhomeip/issues/36760" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/project-chip/connectedhomeip/pull/36843" ,
"source" : "cve@mitre.org"
2024-12-31 21:03:45 +00:00
} ,
{
"url" : "https://github.com/project-chip/connectedhomeip/issues/36760" ,
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
2024-12-19 00:58:47 +00:00
}
]
}