CVE-2018-8151

CWE-119 — Buffer Overflow4 documents4 sources

Severity

4.3MEDIUM

EPSS

9.4%

top 7.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Microsoft Exchange Server Microsoft Exchange Server

Timeline

PublishedMay 9

Latest updateMay 13

Description

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDmicrosoft/exchange_server2010, 2013, 2016+2

▶CVEListV5microsoft/microsoft_exchange_server6 versions+5

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-gg4j-9c4p-ggfr: An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption↗2022-05-13

▶

CVEList

CVE-2018-8151: An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption↗2018-05-09

▶

📋Vendor Advisories

Microsoft

Microsoft Exchange Memory Corruption Vulnerability↗2018-05-08

▶