PT-2019-10743 · Cujo · Cujo Smart Firewall

Published 2019-03-21 · Updated 2023-02-03 · CVE-2018-4003

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003

Description A heap overflow issue exists due to incorrect handling of string lengths when parsing character strings in mDNS resource records. This can lead to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can trigger this issue by sending a specially crafted mDNS message.

Recommendations For CUJO Smart Firewall version 7003, consider disabling the mdnscap binary as a temporary workaround until a patch is available. Restrict access to the mdnscap process to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-4003

Affected Products

Cujo Smart Firewall

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-4003 · Security Note
• https://osv.dev/vulnerability/CVE-2018-4003 · Vendor Advisory