Resource exhaustion in Apple Xcode
CVE-2018-16845
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.098 (95.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H.
Affected products
- Apple Xcode
- F5 Nginx
- [Unknown] Nginx — versions 1.15.6, 1.14.1
- Canonical Ubuntu_linux — versions 14.04, 16.04, 18.04
- Debian Debian_linux — versions 8.0, 9.0
- Opensuse Leap — versions 15.1
Weakness classification (CWE)
Public proof-of-concept exploits
- ARPSyndicate/cvemon
- ChiomaDibor/Vulnerability-Management-of-a-Web-Server-Using-Nessus-and-Patch-Management-with-Ansible
- ConstantaNF/RPM
- Cybervixy/Vulnerability-Management
- Dekkert/dz6_
- Dorakhris/Vulnerability-Assessment-lab
- Oju-kwu/Vulnerability-Management-Lab
- Teedico/Nessus_
- adastraaero/OTUS_
- alisaesage/Disclosures
References
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-16845?
- CVE-2018-16845 is a medium-severity vulnerability in Apple Xcode, classified under Uncontrolled Resource Consumption. CVSS score: 6.1/10. Published 2018-11-07.
- How severe is CVE-2018-16845?
- Medium severity. CVSS v3 base score is 6.1 out of 10.
- Is CVE-2018-16845 known to be exploited?
- 14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.