ID CVE-2018-17174
Summary A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using this library via malformed data.
References
Vulnerable Configurations
  • cpe:2.3:a:nmealib_project:nmealib:0.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:nmealib_project:nmealib:0.5.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
misc https://www.cnblogs.com/tr3e/p/9662324.html
Last major update 24-08-2020 - 17:37
Published 21-09-2018 - 17:29
Last modified 24-08-2020 - 17:37
Back to Top