High severity · published Dec 13, 2021
CVE-2018-25021
The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing…
7.5
CVSS
2.3%
EPSS
No
On KEV
Description
The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TO
Toxcore · Toktok
before 0.2.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-25021
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-25021
Third Party Advisory
https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/
Exploit
https://github.com/TokTok/c-toxcore/issues/1214
Third Party Advisory
https://github.com/TokTok/c-toxcore/pull/1216
More from Toxcore
9.8
CVE-2021-44847
A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the…
3.1
CVE-2018-25022
The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing…