CVE-2024-36982: Denial of Service through null pointer reference in “cluster/config” REST endpoint
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer reference on the cluster/config REST endpoint, which could result in a crash of the Splunk daemon.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36982?
CVE-2024-36982 is classified as a critical vulnerability due to its potential to trigger a null pointer reference, leading to a crash of the Splunk daemon.
How do I fix CVE-2024-36982?
To fix CVE-2024-36982, upgrade Splunk Enterprise to version 9.2.2 or later and Splunk Cloud Platform to version 9.1.2312.109 or later.
What versions of Splunk are affected by CVE-2024-36982?
CVE-2024-36982 affects Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, as well as Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207.
What are the risks associated with CVE-2024-36982?
The primary risk associated with CVE-2024-36982 is that an attacker could cause a denial of service by triggering a crash of the Splunk daemon.
Is there a workaround for CVE-2024-36982?
Currently, there is no known workaround for CVE-2024-36982, so upgrading to the patched versions is necessary.