Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-8049

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service (crash) via crafted packets.

Published

2018-04-03T22:29:00.663

Last Modified

2024-11-21T04:13:11.533

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application unisys stealth_svg < 3.0.1999 Yes
Application unisys stealth_svg < 3.2.030 Yes
Application unisys stealth_svg < 3.3.016 Yes
Application unisys stealth_svg 2.8 Yes
Operating System ibm aix - No
Operating System linux linux_kernel - No
References