CVE-2024-7264

[3553jmichael]

We have upgraded to Splunk Version 10.0.2 but we are seeing a Vulnerability in path $SPLUNK_HOME/mongo/lib/libcurl.so.4.8.0

Installed version: 8.5.0
Fixed Version : 8.9.1

We are not sure how to mitigate this Vulnerability outside of waiting for the next upgrade of SPLUNK. 

Any insight into this would be greatly appreciated.

Thank you!

[richgalloway]

There is no way to mitigate the vulnerability except to install the next version of Splunk that includes a fix.  We don't know which version that will be, but Splunk typically announces when vulnerabilities are fixed.  Check out https://advisory.splunk.com/