CVE-2018-4012 — CRITICAL (9.0)

Vulnerability Description

An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability.

CVSS Score

9.0

CRITICAL

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Webroot	Brightcloud	All versions

Related Weaknesses (CWE)

CWE-119

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0683ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0683ExploitThird Party Advisory

FAQ

What is CVE-2018-4012?

CVE-2018-4012 is a vulnerability with a CVSS score of 9.0 (CRITICAL). An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading t...

How severe is CVE-2018-4012?

CVE-2018-4012 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-4012?

Check the references section above for vendor advisories and patch information. Affected products include: Webroot Brightcloud.