CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "16.04"
                },
                {
                    "last_affected": "16.04"
                },
                {
                    "introduced": "18.04"
                },
                {
                    "last_affected": "18.04"
                },
                {
                    "introduced": "18.10"
                },
                {
                    "last_affected": "18.10"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux"
        }
    ]
}

References

Affected packages

Git / github.com/simsong/tcpflow

Affected ranges

Type

GIT

Repo

https://github.com/simsong/tcpflow

Events

Introduced

Last Affected

7d8133c5772de8ea18184d35a3f69e8dae95ea2f

Introduced

cde661545f824869999360a7b5489c010507662c

Last Affected

cde661545f824869999360a7b5489c010507662c

Fixed

a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb

Database specific

Show details

{
    "cpe": [
        "cpe:2.3:a:digitalcorpora:tcpflow:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:digitalcorpora:tcpflow:1.5.0:alpha:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.5"
        },
        {
            "introduced": "1.5.0-alpha"
        },
        {
            "last_affected": "1.5.0-alpha"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.5.0-alpha

Other

push

tcpflow-1.*

tcpflow-1.2.5

tcpflow-1.2.7

tcpflow-1.2.9

tcpflow-1.3.0

tcpflow-1.4.0

tcpflow-1.4.1

tcpflow-1.4.2

tcpflow-1.4.3

tcpflow-1.4.5

tcpflow-1.5.0alpha

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14938.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "263431917898089951272887722306756947082",
                "16960705493334843210741211398048974095",
                "329830292726982711965374785293791456977",
                "302800325138827059724578790507507565090",
                "87336336488400855913637102334681372717",
                "270457403820026149546639844305609165613",
                "261449765198992541675110649674818872159",
                "331162596895031128530210437412462671802",
                "140461762237614033428383369468125960998",
                "106277531526314253657753793650176805747",
                "192662580726791560291150438083018470649",
                "245028216154237253443083530987415627845",
                "213075352169121008038102790243621575853",
                "223481960602899988842673701328938352184",
                "104625703489278918060615238661938281748",
                "326895023466895463823077623033758943029",
                "108065930782036769996894486271013632229",
                "318394031558307746219120081869191702298",
                "257359142032850477010271814807194523493"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2018-14938-1855abe7",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
        "target": {
            "file": "src/wifipcap/wifipcap.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "223260786614342259660237873670618925192",
            "length": 566
        },
        "id": "CVE-2018-14938-35e18565",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
        "target": {
            "file": "src/wifipcap/wifipcap.cpp",
            "function": "WifiPacket::handle_prism"
        }
    }
]

vanir_signatures_modified

"2026-07-08T14:14:41Z"