CVE-2018-14452

{"id": "CVE-2018-14452", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-07-20T15:29:00.373", "references": [{"url": "https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the \"always assign the sample of the first dimension region of this region\" feature of the function gig::Region::UpdateChunks in gig.cpp."}, {"lang": "es", "value": "Se ha descubierto un problema en libgig 4.1.0. Hay una lectura fuera de l\u00edmites en la caracter\u00edstica \"always assign the sample of the first dimension region of this region\" de la funci\u00f3n gig::Region::UpdateChunks en gig.cpp."}], "lastModified": "2018-09-11T17:38:53.733", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:linuxsampler:libgig:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D2F0A77-FC3F-4639-A296-E1925364EA1F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}