CVE-2018-10921
Last modified
CVE-2018-10921 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.. EPSS estimates a 1.04% chance of exploitation in the next 30 days.
Description
Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.
Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ttembed Project | Ttembed | All versions |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921Exploit, Issue Tracking, Third Party Advisory
- https://github.com/hisdeedsaredust/ttembed/issues/3Exploit, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921Exploit, Issue Tracking, Third Party Advisory
- https://github.com/hisdeedsaredust/ttembed/issues/3Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-10921?
How severe is CVE-2018-10921?
How do I fix CVE-2018-10921?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-10916It has been discovered that lftp up to and including version…5.3
- CVE-2018-10917pulp 2.16.x and possibly older is vulnerable to an improper …6.8
- CVE-2018-10918A null pointer dereference flaw was found in the way samba c…5.2
- CVE-2018-10919The Samba Active Directory LDAP server was vulnerable to an …4.3
- CVE-2018-1092The ext4_iget function in fs/ext4/inode.c in the Linux kerne…
- CVE-2018-10920Improper input validation bug in DNS resolver component of K…6.8
- CVE-2018-10922An input validation flaw exists in ttembed. With a crafted i…7.5
- CVE-2018-10923It was found that the "mknod" call derived from mknod(2) can…8.1
- CVE-2018-10924It was discovered that fsync(2) system call in glusterfs cli…5.3
- CVE-2018-10925It was discovered that PostgreSQL versions before 10.5, 9.6.…8.1
- CVE-2018-10926A flaw was found in RPC request using gfs3_mknod_req support…8.8
- CVE-2018-10927A flaw was found in RPC request using gfs3_lookup_req in glu…8.1
Are you affected by CVE-2018-10921?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST