CVE-2018-18409
published 2018-10-17CVE-2018-18409: A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to…
PriorityP421medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
EPSS
1.30%
67.7th percentile
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | tcpflow | < tcpflow 1.5.2+repack1-1 (bookworm) | tcpflow 1.5.2+repack1-1 (bookworm) |
| digitalcorpora | tcpflow | — | — |
| digitalcorpora | tcpflow | >= 0 < 1.5.2+repack1-1 | 1.5.2+repack1-1 |
| digitalcorpora | tcpflow | >= 0 < 1.5.2+repack1-1 | 1.5.2+repack1-1 |
| digitalcorpora | tcpflow | >= 0 < 1.5.2+repack1-1 | 1.5.2+repack1-1 |
| digitalcorpora | tcpflow | >= 0 < 1.5.2+repack1-1 | 1.5.2+repack1-1 |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
tcpflow vulnerabilities
vendor_ubuntu·2019-04-24
CVE-2018-14938 tcpflow vulnerabilities
Title: tcpflow vulnerabilities
Summary: tcpflow could be made to crash or expose sensitive information over the network
if it opened a specially crafted file or received specially crafted network
traffic.
It was discovered that tcpflow incorrectly handled certain malformed network
packets. A remote attacker could send these packets to a target system, causing
tcpflow to crash or possibly disclose sensitive information.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2018-18409: tcpflow - A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, ...
vendor_debian·2018·CVSS 5.5
CVE-2018-18409 [MEDIUM] CVE-2018-18409: tcpflow - A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, ...
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
Scope: local
bookworm: resolved (fixed in 1.5.2+repack1-1)
bullseye: resolved (fixed in 1.5.2+repack1-1)
forky: resolved (fixed in 1.5.2+repack1-1)
sid: resolved (fixed in 1.5.2+repack1-1)
trixie: resolved (fixed in 1.5.2+repack1-1)
GHSA
GHSA-5xhp-rfv2-8345: A stack-based buffer over-read exists in setbit() at iptree
ghsa_unreviewed·2022-05-14
CVE-2018-18409 [MEDIUM] CWE-125 GHSA-5xhp-rfv2-8345: A stack-based buffer over-read exists in setbit() at iptree
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
OSV
CVE-2018-18409: A stack-based buffer over-read exists in setbit() at iptree
osv·2018-10-17·CVSS 5.5
CVE-2018-18409 [MEDIUM] CVE-2018-18409: A stack-based buffer over-read exists in setbit() at iptree
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [fedora-all]
bugzilla·2018-11-05·CVSS 5.5
CVE-2018-18409 [MEDIUM] CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [fedora-all]
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple
Bugzilla
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h
bugzilla·2018-11-05·CVSS 5.5
CVE-2018-18409 [MEDIUM] CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
References:
https://github.com/simsong/tcpflow/issues/195
Upstream Patch:
https://github.com/simsong/tcpflow/commit/89c04b4fb0e46b3c4f1388686e83966e531cbea9
Discussion:
Created tcpflow tracking bugs for this issue:
Affects: epel-7 [bug 1646414]
Affects: fedora-all [bug 1646413]
---
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status
Bugzilla
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [epel-7]
bugzilla·2018-11-05·CVSS 5.5
CVE-2018-18409 [MEDIUM] CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [epel-7]
CVE-2018-18409 tcpflow: stack-based buffer over-read exists in setbit() at iptree.h [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the following template t
https://github.com/simsong/tcpflow/issues/195https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6MP4YMCJX4ITOBFX427UMOA6E7ZLJDE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN5FW6HKPDP7PI2IVNMFSQVIDSCQ5BOR/https://usn.ubuntu.com/3955-1/https://github.com/simsong/tcpflow/issues/195https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6MP4YMCJX4ITOBFX427UMOA6E7ZLJDE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN5FW6HKPDP7PI2IVNMFSQVIDSCQ5BOR/https://usn.ubuntu.com/3955-1/
2018-10-17
Published