CVE-2018-8065

EPSS 76.5%

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

githubgithub.com/EgeBalci/CVE-2018-8065★ 6 cve_referencepacketstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.htmlno verificado exploitdbwww.exploit-db.com/exploits/51493no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS https://github.com/rapid7/metasploit-framework/pull/9701