CVE-2018-1391

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
IBM	Financial Transaction Manager	3.0.4; 3.0.4.0; 3.1.0; 3.1.0.0

References

http://www.ibm.com/support/docview.wss?uid=swg22013247Patch, Vendor Advisory
http://www.securityfocus.com/bid/103352Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/138376VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22013247Patch, Vendor Advisory
http://www.securityfocus.com/bid/103352Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/138376VDB Entry, Vendor Advisory

Timeline

Published: Feb 22, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-139107.8Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Cons CVE-2018-139119.8Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2018-139125.5Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Con CVE-2018-139137.8Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Sna CVE-2018-139147.8Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer I CVE-2018-139167.8Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapd CVE-2018-139187.8kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops norma CVE-2018-139197.8Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Sna CVE-2018-13923.1IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a special CVE-2018-139207.8Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon CVE-2018-139249.8Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdr CVE-2018-139259.8Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap