CVE-2018-4011

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003

Medium · published March 21, 2019

CVSS v3.0
6.5
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the "RDLENGTH" value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.5th percentile
Published
2019-03-21T15:42Z
EPSS history
Timeline
  • 21 MAR 15:42Z
    An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003
    cvelistv5