CVE-2018-1000824

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-1000824

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000824.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-1000824

Published

2018-12-20T15:29:00.970Z

Modified

2026-04-11T23:33:52.969550Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

References

Affected packages

Git / github.com/megamek/megamek

Affected ranges

Type

GIT

Repo

https://github.com/megamek/megamek

Events

Introduced

Fixed

edff3bfb5f65f50dda3c1f59aab0453f46f64cee

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.45.1"
        }
    ]
}

Affected versions

0.*

0.41.25

0.45.0

v0.*

v0.41.14

v0.41.15

v0.41.17

v0.41.19

v0.41.20

v0.41.21

v0.41.22

v0.41.23

v0.41.24

v0.41.26

v0.41.27

v0.41.28

v0.42.0

v0.43.0

v0.43.1

v0.43.10

v0.43.11

v0.43.2

v0.43.3

v0.43.4

v0.43.5

v0.43.6

v0.43.7-RC1

v0.43.8

v0.43.9

v0.44.0

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-1000824-24ebe458",
        "target": {
            "file": "megamek/src/megamek/MegaMek.java"
        },
        "signature_version": "v1",
        "source": "https://github.com/megamek/megamek/commit/edff3bfb5f65f50dda3c1f59aab0453f46f64cee",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "63215383161821587048219324054287523861",
                "245976165063902565407266002518803907079",
                "76290510814507453856507580212220918992",
                "318065962559192181273929598143927617311"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000824.json"

vanir_signatures_modified

"2026-04-11T23:33:52Z"