CVE-2018-3972

An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability.

• CWE-502

• https://blog.talosintelligence.com/2018/09/epee-levin-vuln.htmlThird Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0637Exploit, Third Party Advisory
• https://blog.talosintelligence.com/2018/09/epee-levin-vuln.htmlThird Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0637Exploit, Third Party Advisory

Published

Sep 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3966An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3967An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3968An exploitable vulnerability exists in the verified boot pro…7
• CVE-2018-3969An exploitable vulnerability exists in the verified boot pro…7.8
• CVE-2018-3970An exploitable memory disclosure vulnerability exists in the…5.5
• CVE-2018-3971An exploitable arbitrary write vulnerability exists in the 0…7.8
• CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing…7.8
• CVE-2018-3974An exploitable local privilege elevation vulnerability exist…7.8
• CVE-2018-3975An exploitable uninitialized variable vulnerability exists i…7.5
• CVE-2018-3976An exploitable out-of-bounds write exists in the CALS Raster…7.8
• CVE-2018-3977An exploitable code execution vulnerability exists in the XC…8.8
• CVE-2018-3978An exploitable out-of-bounds write vulnerability exists in t…8.8