CVE-2018-12915

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-129169.8In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c.CVE-2018-129179.8In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c.CVE-2018-129189.8In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c.CVE-2018-129196.1In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.CVE-2018-12928.1Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a hacker could inject SQL CVE-2018-129207.5Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettinCVE-2018-129217.5Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the mCVE-2018-129227.5Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/coCVE-2018-129237.5BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the #!/system URI.CVE-2018-129249.8Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service.CVE-2018-129259.8Baseon Lantronix MSS devices do not require a password for TELNET access.CVE-2018-129267.5Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or
CVE-2018-12915: Critical severity, CVSS 9.8 | Vulnix