CVE-2018-25021

Опубликовано: 13 дек. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).

Ссылки

https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/
Third Party Advisory
https://github.com/TokTok/c-toxcore/issues/1214
Exploit
Third Party Advisory
https://github.com/TokTok/c-toxcore/pull/1216
Third Party Advisory
https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/
Third Party Advisory
https://github.com/TokTok/c-toxcore/issues/1214
Exploit
Third Party Advisory
https://github.com/TokTok/c-toxcore/pull/1216
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:toktok:toxcore:*:*:*:*:*:*:*:*

Версия до 0.2.8 (исключая)

EPSS

Процентиль: 76%

0.00976

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404

Связанные уязвимости

CVE-2018-25021

CVSS3: 7.5

ubuntu

около 4 лет назад

CVE-2018-25021

CVSS3: 7.5

debian

около 4 лет назад

The TCP Server module in toxcore before 0.2.8 doesn't free the TCP pri ...

GHSA-p3p2-9rqf-r8j8

github

около 4 лет назад

EPSS

Процентиль: 76%

0.00976

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404