Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-17292
HistorySep 21, 2018 - 7:29 a.m.

Design/Logic Flaw

2018-09-2107:29:00
PRIOn knowledge base
www.prio-n.com
2

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer than 4 bytes.

CPENameOperatorVersion
webassembly_virtual_machineeq< 2018916

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

Related for PRION:CVE-2018-17292