PT-2019-9318 · Forcepoint · Forcepoint Email Security

Tomasz Bukowski · Published 2019-04-09 · Updated 2022-10-28 · CVE-2018-16530

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint Email Security version 8.5

Description A stack-based buffer overflow allows an attacker to craft malicious input, potentially crashing a process and creating a denial-of-service. Although no known Remote Code Execution (RCE) vulnerabilities exist, the possibility of RCE cannot be completely ruled out. Data Execution Protection (DEP) is enabled on the Email appliance as a risk mitigation.

Recommendations For Forcepoint Email Security version 8.5, consider applying configuration changes to mitigate the risk of exploitation, such as enabling additional security features to prevent malicious input. As a temporary workaround, restrict access to potentially vulnerable components until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-16530

Affected Products

Forcepoint Email Security

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-16530 · Security Note
• https://help.forcepoint.com/security/CVE/CVE-2018-16530.html · Vendor Advisory
• https://support.forcepoint.com/KBArticle?id=000016621 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-16530 · Vendor Advisory