CyberSec.Space Logo
CVEブラウザに戻る

CVE-2018-3985

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1990%
EPSS Percentile30.89th
Published2019年3月21日
Last Modified2024年11月21日

Vulnerability Description

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

Affected Platforms (CPE)

📦
Getcujo

Smart Firewall

= 7003

References & Advisories

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653
🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653

関連する脆弱性情報

CVE-2018-403110.0

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the w...

CVE-2018-40039.8

An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The stri...

CVE-2017-122778.8

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Fire...

CVE-2018-39638.0

An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a n...