gpsd Stack-based Buffer Overflow Vulnerability

Last Update Date: 19 Feb 2019 10:14 Release Date: 19 Feb 2019 5250 Views

RISK: Medium Risk

TYPE: Operating Systems - Embedded OS

A Vulnerability has been identified in gpsd, a remote attacker can exploit this vulnerability to trigger Denial Of Service, Remote Code Execution and Sensitive Information Disclosure on the targeted system.

Impact

Denial of Service
Remote Code Execution
Information Disclosure

System / Technologies affected

version prior to 3.18

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 3.18

Vulnerability Identifier

CVE-2018-17937

Source

US-CERT