Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-14938
Description:An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).
Test IDs: 1.3.6.1.4.1.25623.1.0.892468   1.3.6.1.4.1.25623.1.0.875032   1.3.6.1.4.1.25623.1.1.10.2018.0401   1.3.6.1.4.1.25623.1.0.875029  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-14938
https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb
https://github.com/simsong/tcpflow/issues/182
https://lists.debian.org/debian-lts-announce/2020/11/msg00046.html
https://usn.ubuntu.com/3955-1/




© 1998-2025 E-Soft Inc. All rights reserved.