CVE-2018-18409

PoC —

CVSS 3.0

5.5 medium

EPSS

1%p69

Published

Oct 17, 2018 (Oct 17, 2018)

Modified

Jun 17, 2026

Description

A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.

Vendors: digitalcorpora fedoraproject canonical
Products: tcpflow, fedora, ubuntu linux
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.