CVE-2018-1158
published 2018-08-23CVE-2018-1158: Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via…
PriorityP433medium6.5CVSS 3.0
AVNACLPRLUINSUCNINAH
EPSS
2.48%
82.6th percentile
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mikrotik | routeros | < 6.40.9 | 6.40.9 |
| mikrotik | routeros | < 6.42.7 | 6.42.7 |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Tenable
Tenable Research Advisory: Multiple Vulnerabilities Discovered in MikroTik's RouterOS
blogs_tenable·2018-10-07·CVSS 8.8
[HIGH] Tenable Research Advisory: Multiple Vulnerabilities Discovered in MikroTik's RouterOS
Blog / Research
Subscribe
# Tenable Research Advisory: Multiple Vulnerabilities Discovered in MikroTik's RouterOS
Tenable Research
October 7, 2018
3 Min Read
Tenable Research has discovered several vulnerabilities in RouterOS, an operating system used in MikroTik routers, the most critical of which would allow attackers to potentially gain full system access.
Tenable Research has discovered several vulnerabilities in RouterOS, an operating system used in MikroTik routers. Jacob Baines, the Tenable researcher who made the discovery, presented the talk "Bug Hunting in RouterOS" at Derbycon on October 7. The vulnerabilities include CVE-2018-1156 -- an authenticated remote code execution (RCE) -- as well as a file upload memory exhaustion (CVE-2018-1157), a www memory corruption (CVE-201
Tenable
Tenable Research Advisory: Multiple Vulnerabilities Discovered in MikroTik's RouterOS
blogs_tenable·2018-10-07
Tenable Research Advisory: Multiple Vulnerabilities Discovered in MikroTik's RouterOS
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
[R1] Mikrotik RouterOS Multiple Authenticated Vulnerabilities
blogs_tenable·2018-08-22
[R1] Mikrotik RouterOS Multiple Authenticated Vulnerabilities
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Bugzilla
CVE-2018-1000409 jenkins: Session fixation vulnerability on user signup
bugzilla·2018-10-25·CVSS 5.4
CVE-2018-1000409 [MEDIUM] CVE-2018-1000409 jenkins: Session fixation vulnerability on user signup
CVE-2018-1000409 jenkins: Session fixation vulnerability on user signup
When signing up for a new user account on instances using Jenkins' own user database, Jenkins did not invalidate the existing session and create a new one. This allowed session fixation.
External References:
https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1158
Discussion:
Created jenkins tracking bugs for this issue:
Affects: fedora-all [bug 1642894]
---
Jenkins security policy[0]:
"Any security advisory related updates to Jenkins core or the plugins we include in the OpenShift Jenkins master image will only occur in the v3.11 and v4.x branches of this repository.
We do support running the v3.11 version of the master image against older v3.x (as far back as v3.4) OpenShift clusters if you want to pi
http://seclists.org/fulldisclosure/2019/Jul/20https://mikrotik.com/download/changelogshttps://mikrotik.com/download/changelogs/bugfix-release-treehttps://www.tenable.com/security/research/tra-2018-21http://seclists.org/fulldisclosure/2019/Jul/20https://mikrotik.com/download/changelogshttps://mikrotik.com/download/changelogs/bugfix-release-treehttps://www.tenable.com/security/research/tra-2018-21
2018-08-23
Published