CRITICAL

CVE-2018-12584

CVSS v3

9.8

CRITICAL

EPSS Score

25.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.

Technical details

Published
7/16/2018

Frequently asked questions

What is CVE-2018-12584?

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.

Is CVE-2018-12584 actively exploited?

Active exploitation of CVE-2018-12584 has not been confirmed. The EPSS score is 25.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-12584?

CVE-2018-12584 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2018-12584 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.