CVE-2018-15503

2018-08-1802:29:01

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process. An attacker can craft a serialized object to exploit this vulnerability and cause a SEGV.

CPENameOperatorVersion
swoole-srceqswoole-1.8.3-rc1
swoole-srceqswoole-1.7.1-beta
swoole-srceq1.3.1
swoole-srceqswoole-1.7.13-rc1
swoole-srceqswoole-1.7.7-stable
swoole-srceq1.10.0
swoole-srceqswoole-1.8.1-beta
swoole-srceqswoole-1.7.17-alpha
swoole-srceq1.9.17
swoole-srceq1.10.1

Name	Operator	Version
swoole-src	eq	swoole-1.8.3-rc1
swoole-src	eq	swoole-1.7.1-beta
swoole-src	eq	1.3.1
swoole-src	eq	swoole-1.7.13-rc1
swoole-src	eq	swoole-1.7.7-stable
swoole-src	eq	1.10.0
swoole-src	eq	swoole-1.8.1-beta
swoole-src	eq	swoole-1.7.17-alpha
swoole-src	eq	1.9.17
swoole-src	eq	1.10.1