Buffer overflow in uc-httpd - CVE-2018-10088
Published: August 1, 2018 / Updated: June 17, 2021
Vulnerability identifier: #VU14155
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10088
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to buffer overflow. A remote attacker can trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability my result in system compromise.
Affected software
uc-httpd
How to mitigate CVE-2018-10088
Install update from vendor's website.