CVE-2018-8531

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Средний

Описание

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Ссылки

http://www.securityfocus.com/bid/105472
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105472
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:azure_internet_of_things_edge:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:microsoft:csharp_software_development_kit:*:*:*:*:*:azure_internet_of_things:*:*

EPSS

Процентиль: 95%

0.1868

Средний

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-8531

msrc

больше 7 лет назад

Azure IoT Device Client SDK Memory Corruption Vulnerability

GHSA-x6h5-845f-rv5f

CVSS3: 8.8

github

больше 3 лет назад

BDU:2019-00076

CVSS3: 5.3

fstec