CVE
CVE-2018-25223
CVE-2018-25223 on Ubuntu 24.04 LTS (noble) - high
Crashmail 1.6 contains a stack-based buffer overflow vulnerability thatallows remote attackers to execute arbitrary code by sending maliciousinput to the application. Attackers can craft payloads with ROP chains toachieve code execution in the application context, with failed attemptspotentially causing denial of service.
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.3
-
4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
C
H
U
-
C
H
U
-
Related Resources
No items found.
References
https://www.cve.org/CVERecord?id=CVE-2018-25223
Basic Information
Ecosystem
