CVE-2018-11488

Exploit

EPSS 12.29%
Veröffentlicht 29.05.2018 07:29:00
Zuletzt bearbeitet 21.11.2024 03:43:28
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

A stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows remote attackers to cause a denial of service condition by sending a specially crafted HTTP request.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dtsearch ≫ Dtsearch Version <= 7.90.8538.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	12.29%	0.932

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://github.com/bitsadmin/exploits/tree/master/CVE-2018-11488

Third Party Advisory

Exploit

https://www.dtsearch.com/ReleaseNotes.html

Vendor Advisory

Release Notes

https://www.dtsearch.com/ReleaseNotesBeta.html

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-11488

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-11488

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-11488

EUVD