CVE-2018-7999
Last modified
CVE-2018-7999 is a vulnerability of currently unknown severity. In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.. EPSS estimates a 2.32% chance of exploitation in the next 30 days.
Description
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sil | Graphite2 | 1.3.11 |
References
- https://github.com/silnrsi/graphite/issues/22Exploit, Third Party Advisory
- https://github.com/silnrsi/graphite/issues/22Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7999?
How severe is CVE-2018-7999?
How do I fix CVE-2018-7999?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
- CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…
- CVE-2018-7995Race condition in the store_int_with_restart() function in a…
- CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
- CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the…
- CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference…
- CVE-2018-8000In PoDoFo 0.9.5, there exists a heap-based buffer overflow v…
- CVE-2018-8001In PoDoFo 0.9.5, there exists a heap-based buffer over-read …
- CVE-2018-8002In PoDoFo 0.9.5, there exists an infinite loop vulnerability…
- CVE-2018-8003Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a …
- CVE-2018-8004There are multiple HTTP smuggling and cache poisoning issues…
- CVE-2018-8005When there are multiple ranges in a range request, Apache Tr…
Are you affected by CVE-2018-7999?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST