CVE-2018-7551

NONE EPSS 80.8%
Published Feb 28, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 28, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.

Threat Intelligence

EPSS Exploit Probability
80.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 2

VendorProductVersionRange
sam2p_projectsam2p0.49.4any
debiandebian_linux7.0any

References 3

  • bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527
    Issue TrackingThird Party Advisory
  • github.com https://github.com/pts/sam2p/issues/28
    ExploitThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html
    Mailing ListThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.