CVE-2018-25021 - The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS)

Back Back to CVE browser

HIGH

The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS)

Published Dec 13, 2021

7.5

HIGH

CVSS 3.1

EPSS 2.34%

Description

The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (4)

https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13802
Advisory
https://github.com/TokTok/c-toxcore/issues/1214
x_refsource_MISCExploitThird Party Advisory
https://github.com/TokTok/c-toxcore/pull/1216
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13802		Advisory
https://github.com/TokTok/c-toxcore/issues/1214		x_refsource_MISCExploitThird Party Advisory
https://github.com/TokTok/c-toxcore/pull/1216		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 13, 2021

Updated Aug 5, 2024

Reserved Dec 13, 2021

Link CVE-2018-25021

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-25021

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 13, 2021

Updated Aug 5, 2024

Link EUVD-2018-13802

GitHub

No data