High severity · published Feb 5, 2018
CVE-2018-6651
In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match)…
8.8
CVSS
2.4%
EPSS
No
On KEV
Description
In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full control over the victim's computer.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Parsec · Parsecgaming
before 140-3 · source: NVD
UN
Uncurl · Uncurl Project
before 0.07 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-6651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-6651
gist.github.com
https://gist.github.com/Zenexer/ac7601c0e367d876353137e5099b18a7
Patch
https://github.com/chrisd1100/uncurl/commit/448cd13e7b18c83855d706c564341ddd1e38e769
Third Party Advisory
https://github.com/chrisd1100/uncurl/releases/tag/0.07
More from Parsec
9.8
CVE-2018-6634
A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account