WEKA INTEREST Security Scanner Portscan memory allocation

Published 4 y ago 2022-03-28 · modified 4 mo ago 2026-06-17 · JSON

CVSS

4.3

v3.1 · CNA

CISA KEV

not known exploited

EPSS

1.5%

percentile 74%

Public exploits

none known

A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CISA SSVC assessment

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 2 y ago 2024-04-23

Exploit prediction (EPSS)

1.46% probability of exploitation in the next 30 days, higher than 74% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.1	4.3	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L`
CNA	3.1	4.3	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L`
NVD	3.1	7.5	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	5.0	`AV:N/AC:L/Au:N/C:N/I:N/A:P`

Affected products

WEKA INTEREST Security Scanner
weka interest_security_scanner

Classification

Weakness

CWE-789 Memory Allocation with Excessive Size Value
CWE-770 Allocation of Resources Without Limits or Throttling

References

vuldb.com /?id.101969 · x_refsource_MISC, x_transferred
computec.ch /news.php?item.117 · x_refsource_MISC, x_transferred
vuldb.com /?id.101974 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2017-20016
NVD: CVE-2017-20016

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary