Vulnerability-Lookup

SUSE-SU-2018:3480-1

Vulnerability from csaf_suse - Published: 2018-10-26 08:16 - Updated: 2018-10-26 08:16

Summary

Security update for wpa_supplicant

Severity

Moderate

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant provides the following fixes: This security issues was fixe: - CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the vulnerability to recover sensitive information (bsc#1104205) These non-security issues were fixed: - Fix reading private key passwords from the configuration file. (bsc#1099835) - Enable PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network. (bsc#1109209) - compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725) - Enabled timestamps in log file when being invoked by systemd service file (bsc#1080798). - Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854). - Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).

Patchnames: SUSE-SLE-Module-Basesystem-15-2018-2484

CVE-2018-14526

5.9 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

13 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1080798	self
https://bugzilla.suse.com/1098854	self
https://bugzilla.suse.com/1099835	self
https://bugzilla.suse.com/1104205	self
https://bugzilla.suse.com/1109209	self
https://bugzilla.suse.com/1111873	self
https://www.suse.com/security/cve/CVE-2018-14526/	self
https://www.suse.com/security/cve/CVE-2018-14526	external
https://bugzilla.suse.com/1104205	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant provides the following fixes:\n\nThis security issues was fixe:\n\n- CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the vulnerability to recover sensitive information (bsc#1104205)\n\nThese non-security issues were fixed:\n\n- Fix reading private key passwords from the configuration file. (bsc#1099835)\n- Enable PWD as EAP method. This allows for password-based authentication, which is easier\n  to setup than most of the other methods, and is used by the Eduroam network. (bsc#1109209)\n- compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725)\n- Enabled timestamps in log file when being invoked by systemd service file (bsc#1080798).\n- Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854).\n- Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Module-Basesystem-15-2018-2484",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3480-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:3480-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183480-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:3480-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004798.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1080798",
        "url": "https://bugzilla.suse.com/1080798"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1098854",
        "url": "https://bugzilla.suse.com/1098854"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1099835",
        "url": "https://bugzilla.suse.com/1099835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104205",
        "url": "https://bugzilla.suse.com/1104205"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1109209",
        "url": "https://bugzilla.suse.com/1109209"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111873",
        "url": "https://bugzilla.suse.com/1111873"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2018-10-26T08:16:07Z",
      "generator": {
        "date": "2018-10-26T08:16:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:3480-1",
      "initial_release_date": "2018-10-26T08:16:07Z",
      "revision_history": [
        {
          "date": "2018-10-26T08:16:07Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.6-4.11.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-2.6-4.11.1.aarch64",
                  "product_id": "wpa_supplicant-2.6-4.11.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.6-4.11.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-2.6-4.11.1.ppc64le",
                  "product_id": "wpa_supplicant-2.6-4.11.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.6-4.11.1.s390x",
                "product": {
                  "name": "wpa_supplicant-2.6-4.11.1.s390x",
                  "product_id": "wpa_supplicant-2.6-4.11.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.6-4.11.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.6-4.11.1.x86_64",
                  "product_id": "wpa_supplicant-2.6-4.11.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.6-4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.6-4.11.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.6-4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.6-4.11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.6-4.11.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.6-4.11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.6-4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.6-4.11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-4.11.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-10-26T08:16:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    }
  ]
}

CVE-2018-14526 (GCVE-0-2018-14526)

Vulnerability from cvelistv5 – Published: 2018-08-08 19:00 – Updated: 2024-08-05 09:29

Summary

An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://papers.mathyvanhoef.com/woot2018.pdf	x_refsource_MISC
http://www.securitytracker.com/id/1041438	vdb-entryx_refsource_SECTRACK
https://w1.fi/security/2018-1/unauthenticated-eap…	x_refsource_MISC
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://access.redhat.com/errata/RHSA-2018:3107	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3745-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://www.us-cert.gov/ics/advisories/icsa-19-344-01	x_refsource_MISC

Date Public

2018-08-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://papers.mathyvanhoef.com/woot2018.pdf"
          },
          {
            "name": "1041438",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041438"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt"
          },
          {
            "name": "FreeBSD-SA-18:11",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:11.hostapd.asc"
          },
          {
            "name": "RHSA-2018:3107",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3107"
          },
          {
            "name": "[debian-lts-announce] 20180809 [SECURITY] [DLA 1462-1] wpa security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00009.html"
          },
          {
            "name": "USN-3745-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3745-1/"
          },
          {
            "name": "openSUSE-SU-2019:1345",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.us-cert.gov/ics/advisories/icsa-19-344-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-19T18:23:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://papers.mathyvanhoef.com/woot2018.pdf"
        },
        {
          "name": "1041438",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041438"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt"
        },
        {
          "name": "FreeBSD-SA-18:11",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:11.hostapd.asc"
        },
        {
          "name": "RHSA-2018:3107",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3107"
        },
        {
          "name": "[debian-lts-announce] 20180809 [SECURITY] [DLA 1462-1] wpa security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00009.html"
        },
        {
          "name": "USN-3745-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3745-1/"
        },
        {
          "name": "openSUSE-SU-2019:1345",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.us-cert.gov/ics/advisories/icsa-19-344-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14526",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://papers.mathyvanhoef.com/woot2018.pdf",
              "refsource": "MISC",
              "url": "https://papers.mathyvanhoef.com/woot2018.pdf"
            },
            {
              "name": "1041438",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041438"
            },
            {
              "name": "https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt",
              "refsource": "MISC",
              "url": "https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt"
            },
            {
              "name": "FreeBSD-SA-18:11",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:11.hostapd.asc"
            },
            {
              "name": "RHSA-2018:3107",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3107"
            },
            {
              "name": "[debian-lts-announce] 20180809 [SECURITY] [DLA 1462-1] wpa security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00009.html"
            },
            {
              "name": "USN-3745-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3745-1/"
            },
            {
              "name": "openSUSE-SU-2019:1345",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00013.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
            },
            {
              "name": "https://www.us-cert.gov/ics/advisories/icsa-19-344-01",
              "refsource": "MISC",
              "url": "https://www.us-cert.gov/ics/advisories/icsa-19-344-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14526",
    "datePublished": "2018-08-08T19:00:00.000Z",
    "dateReserved": "2018-07-22T00:00:00.000Z",
    "dateUpdated": "2024-08-05T09:29:51.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.