CVE-2017-20016 — WEKA INTEREST Security Scanner Portscan memory allocation

Back Back to CVE browser

HIGH

WEKA INTEREST Security Scanner Portscan memory allocation

Published Mar 28, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.46%

Description

A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

Vendor WEKA Product INTEREST Security Scanner Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -
- Version
  1.1
  Status
  affected
  Constraints
  -
- Version
  1.2
  Status
  affected
  Constraints
  -
- Version
  1.3
  Status
  affected
  Constraints
  -
- Version
  1.4
  Status
  affected
  Constraints
  -
- Version
  1.5
  Status
  affected
  Constraints
  -
- Version
  1.6
  Status
  affected
  Constraints
  -
- Version
  1.7
  Status
  affected
  Constraints
  -
- Version
  1.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WEKA

INTEREST Security Scanner

n/a

Version	Status	Constraints
1.0	affected	-
1.1	affected	-
1.2	affected	-
1.3	affected	-
1.4	affected	-
1.5	affected	-
1.6	affected	-
1.7	affected	-
1.8	affected	-

Vendor Weka Product Interest Security Scanner Default
n/a
- Version
  1.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Weka

Interest Security Scanner

n/a

Version	Status	Constraints
1.8	affected	-

Remediation

No remediation recorded yet.

Metrics

1.46% 0.01462

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.01462

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (19 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	1.46% (0.01462)	72.68th	v5 (v2026.06.15)
Jun 15, 2026	1.41% (0.01405)	68.97th	v5 (v2026.06.15)
Mar 17, 2025	0.06% (0.00061)	16.42th	v4 (v2025.03.14)
Dec 12, 2024	0.58% (0.00579)	78.78th	v3 (v2023.03.01)
Apr 23, 2024	0.77% (0.00766)	80.97th	v3 (v2023.03.01)
Mar 21, 2024	0.54% (0.00541)	76.83th	v3 (v2023.03.01)
Dec 31, 2023	0.54% (0.00541)	74.83th	v3 (v2023.03.01)
Nov 17, 2023	0.45% (0.00447)	72.17th	v3 (v2023.03.01)
Nov 3, 2023	0.32% (0.00315)	67.06th	v3 (v2023.03.01)
Oct 19, 2023	0.23% (0.00232)	61.03th	v3 (v2023.03.01)
Sep 8, 2023	0.24% (0.00239)	61.31th	v3 (v2023.03.01)
Apr 30, 2023	0.23% (0.00229)	59.54th	v3 (v2023.03.01)
Apr 4, 2023	0.20% (0.00203)	56.69th	v3 (v2023.03.01)
Mar 7, 2023	0.11% (0.00112)	42.84th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00954)	36.37th	v2 (v2022.01.01)
Sep 7, 2022	0.95% (0.00954)	34.55th	v2 (v2022.01.01)
Apr 5, 2022	0.95% (0.00954)	32.55th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00890)	26.62th	v2 (v2022.01.01)
Mar 29, 2022	0.89% (0.00890)	13.20th	v2 (v2022.01.01)

Weaknesses (2)

CWE-770

Allocation of Resources Without Limits

CWE-789

References (3)

http://www.computec.ch/news.php?item.117
x_refsource_MISCThird Party Advisory
https://vuldb.com/?id.101969
x_refsource_MISCThird Party AdvisoryVDB Entry
https://vuldb.com/?id.101974
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.computec.ch/news.php?item.117		x_refsource_MISCThird Party Advisory
https://vuldb.com/?id.101969		x_refsource_MISCThird Party AdvisoryVDB Entry
https://vuldb.com/?id.101974		x_refsource_MISCThird Party AdvisoryVDB Entry