Vulnerability Description
A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote Code Execution (RCE) vulnerabilities exist, as with all buffer overflows, the possibility of RCE cannot be completely ruled out. Data Execution Protection (DEP) is already enabled on the Email appliance as a risk mitigation.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Forcepoint | Email Security | 8.5.0 |
Related Weaknesses (CWE)
References
- https://help.forcepoint.com/security/CVE/CVE-2018-16530.htmlVendor Advisory
- https://support.forcepoint.com/KBArticle?id=000016621Permissions RequiredVendor Advisory
- https://help.forcepoint.com/security/CVE/CVE-2018-16530.htmlVendor Advisory
- https://support.forcepoint.com/KBArticle?id=000016621Permissions RequiredVendor Advisory
FAQ
What is CVE-2018-16530?
CVE-2018-16530 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote C...
How severe is CVE-2018-16530?
CVE-2018-16530 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-16530?
Check the references section above for vendor advisories and patch information. Affected products include: Forcepoint Email Security.