8.3high
CVE-2018-3985
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
8.3
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 79%
Public exploits
0
none known
Summary
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
Exploit prediction (EPSS)
1.86% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 8.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 8.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- n/a CUJO
Classification
- Weakness
- CWE-415 Double Free
References
- talosintelligence.com /vulnerability_reports/TALOS-2018-0653 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-3985
- NVD: CVE-2018-3985
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.