CVE-2018-13421 — CRITICAL (9.8)

Q: What is CVE-2018-13421?

CVE-2018-13421 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.

Q: How severe is CVE-2018-13421?

CVE-2018-13421 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2018-13421?

Check the references section above for vendor advisories and patch information. Affected products include: Fast-Cpp-Csv-Parser Project Fast-Cpp-Csv-Parser.

Vulnerability Description

Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Fast-Cpp-Csv-Parser Project	Fast-Cpp-Csv-Parser	< 2018-07-06

Related Weaknesses (CWE)

CWE-125

References

https://github.com/ben-strasser/fast-cpp-csv-parser/issues/67ExploitThird Party Advisory
https://github.com/ben-strasser/fast-cpp-csv-parser/issues/67ExploitThird Party Advisory

FAQ

What is CVE-2018-13421?

CVE-2018-13421 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.

How severe is CVE-2018-13421?

CVE-2018-13421 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-13421?

Check the references section above for vendor advisories and patch information. Affected products include: Fast-Cpp-Csv-Parser Project Fast-Cpp-Csv-Parser.