CVE-2018-25062 - flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

Back Back to CVE browser

HIGH

flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

Published Jan 1, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.90%

Description

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this issue. The name of the patch is 1df72c9f0f61304437f4f1037df03b5fb36d5a79. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217152.

Affected products

Vendor Flar2 Product ElementalX Default
n/a
- Version
  6.x
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Flar2

ElementalX

n/a

Version	Status	Constraints
6.x	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13824
Advisory
https://github.com/flar2/ElementalX-N9/commit/1df72c9f0f61304437f4f1037df03b5fb36d5a79
patchThird Party Advisory
https://vuldb.com/?ctiid.217152
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217152
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13824		Advisory
https://github.com/flar2/ElementalX-N9/commit/1df72c9f0f61304437f4f1037df03b5fb36d5a79		patchThird Party Advisory
https://vuldb.com/?ctiid.217152		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217152		vdb-entrytechnical-descriptionThird Party Advisory