PT-2018-12813 · Tcpflow+2 · Tcpflow+2

Zillr0O · Published 2018-08-04 · Updated 2020-11-29 · CVE-2018-14938

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions TCPFLOW versions prior to 1.5.0-alpha

Description An issue in the wifipcap/wifipcap.cpp file allows for an integer overflow in the handle prism function during caplen processing. If the caplen is less than 144, this can cause an integer overflow in the handle 80211 function, resulting in an out-of-bounds read. This may allow access to sensitive memory or lead to a denial of service.

Recommendations For versions prior to 1.5.0-alpha, as a temporary workaround, consider disabling the handle prism and handle 80211 functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Overflow

Out of bounds Read

Weakness Enumeration

CWE-190

CWE-125

Related Identifiers

ALT-PU-2018-2392

CVE-2018-14938

DLA-2468-1

MGASA-2018-0401

USN-3955-1

Affected Products

Alt Linux

Tcpflow

Ubuntu

References · 21

• 🔥 https://github.com/simsong/tcpflow/issues/182 · Exploit
• https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb · Patch
• https://osv.dev/vulnerability/USN-3955-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14938 · Security Note
• https://usn.ubuntu.com/3955-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0401 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14938 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-14938 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2468-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14938 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14938 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0401.html · Security Note
• https://cve.org/CVERecord?id=CVE-2018-14938 · Security Note
• https://ubuntu.com/security/notices/USN-3955-1 · Vendor Advisory