Out-of-Bounds Write Vulnerability in 3proxy Admin Interface
CVE-2019-14495

5.8MEDIUM

Key Information:

Vendor

3proxy

Status
3proxy
Vendor
CVE Published:
1 August 2019

What is CVE-2019-14495?

The webadmin.c file in 3proxy, prior to version 0.8.13, exhibits an out-of-bounds write vulnerability within its admin interface. This flaw could allow an unauthorized user to exploit the system, potentially leading to arbitrary code execution or data corruption, thus posing significant security risks to the impacted systems. It is vital for users to update to version 0.8.13 or later to mitigate this vulnerability.

References

https://github.com/z3APA3A/3proxy/releases/tag/0.8.13
x_refsource_MISC
https://github.com/z3APA3A/3proxy/compare/0.8.12...0.8.13
x_refsource_MISC
https://github.com/z3APA3A/3proxy/commit/3b67dc844789dc0f...
x_refsource_MISC

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

CVSS V3.0

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.