PT-2019-10742 · Cujo · Cujo Smart Firewall

Published 2019-10-31 · Updated 2023-02-03 · CVE-2018-4002

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003

Description A denial-of-service issue exists due to unsafe handling of label compression pointers in mDNS packets by the mdnscap binary, leading to uncontrolled recursion and eventual stack exhaustion, causing the mdnscap process to crash. An unauthenticated attacker can trigger this issue by sending a specially crafted mDNS message.

Recommendations For CUJO Smart Firewall version 7003, consider disabling the mdnscap binary or restricting its access to mDNS packets until a fix is available.

Exploit

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2018-4002

Affected Products

Cujo Smart Firewall

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0671 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4002 · Security Note