CVE-2024-36844: Use After Free

Published May 31, 2024

Updated

libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

Affected Software

2 affected components

libmodbus libmodbus

libmodbus libmodbus=3.1.6

Event History

May 31, 2024

CVE Published

via MITRE·07:16 PM

Data Sourced

via MITRE·07:16 PM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-36844?

CVE-2024-36844 has a severity rating that indicates it can lead to Denial of Service (DoS).

How do I fix CVE-2024-36844?

To fix CVE-2024-36844, update to the latest version of libmodbus that addresses this vulnerability.

What can an attacker achieve with CVE-2024-36844?

An attacker can exploit CVE-2024-36844 to cause a Denial of Service by sending a crafted message to the unit-test-server.

Which version of libmodbus is affected by CVE-2024-36844?

CVE-2024-36844 affects libmodbus version 3.1.6.

What is a use-after-free vulnerability in the context of CVE-2024-36844?

A use-after-free vulnerability, like CVE-2024-36844, occurs when a program continues to use a memory location after it has been freed, potentially leading to crashes or unexpected behavior.