CVE-2018-5189

EPSS 1.2%

Vexday Risk Score

23Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 1.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

10 Jan 2018Public PoC

11 Jan 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/43494/unverified exploitdbwww.exploit-db.com/exploits/43494unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://www.exploit-db.com/exploits/43494/https://www.fidusinfosec.com/jungo-windriver-code-execution-cve-2018-5189/