Maple Labs

CVE search · CVE-2018-18409

CVE-2018-18409

medium 5.5

A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-125

Severity

VersionScoreVectorSource
CVSS 3.0 medium 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H nvd@nist.govPrimary
CVSS 2.0 medium 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References