CVE-2018-0644

Name: CVE-2018-0644
Creator: NVD / NIST
Published: 2018-09-07T14:29:01.087+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.01%

Last modified Jun 17, 2026

CVE-2018-0644 is a vulnerability of currently unknown severity. Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors.. EPSS estimates a 1.01% chance of exploitation in the next 30 days.

Description

Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors.

Metrics

EPSS Probability

1.01%

58.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Canonical	Ubuntu Linux	14.04
Canonical	Ubuntu Linux	16.04

References

http://jvn.jp/en/jp/JVN37376131/index.htmlThird Party Advisory
https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.htmlVendor Advisory
http://jvn.jp/en/jp/JVN37376131/index.htmlThird Party Advisory
https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.htmlVendor Advisory

Timeline

Published: Sep 7, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-0644?

How severe is CVE-2018-0644?

Severity scoring for CVE-2018-0644 is pending analysis. The EPSS model estimates a 1.01% probability of exploitation in the next 30 days.

How do I fix CVE-2018-0644?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-0644?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST