PT-2019-15545 · Moolticute · Moolticute

Shadi Habbal · Published 2019-10-30 · Updated 2019-11-05 · CVE-2019-18635

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Moolticute versions prior to v0.42.2

Description A NULL pointer dereference issue was discovered in the MPDevice win.cpp file.

Recommendations For versions prior to v0.42.2, update to version v0.42.2 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-18635

Affected Products

Moolticute

References · 4

• 🔥 https://securiteam.io/2019/10/27/a-null-pointer-dereference · Exploit
• https://github.com/mooltipass/moolticute/pull/483 · Patch
• https://osv.dev/vulnerability/CVE-2019-18635 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18635 · Security Note