CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "16.04"
                },
                {
                    "last_affected": "16.04"
                },
                {
                    "introduced": "18.04"
                },
                {
                    "last_affected": "18.04"
                },
                {
                    "introduced": "18.10"
                },
                {
                    "last_affected": "18.10"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux",
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/simsong/tcpflow

Affected ranges

Type

GIT

Repo

https://github.com/simsong/tcpflow

Events

Introduced

Last affected

7d8133c5772de8ea18184d35a3f69e8dae95ea2f

Introduced

cde661545f824869999360a7b5489c010507662c

Last affected

cde661545f824869999360a7b5489c010507662c

Fixed

a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb

Database specific

{
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": [
        "cpe:2.3:a:digitalcorpora:tcpflow:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:digitalcorpora:tcpflow:1.5.0:alpha:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.5"
        },
        {
            "introduced": "1.5.0-alpha"
        },
        {
            "last_affected": "1.5.0-alpha"
        }
    ]
}

Affected versions

1.*

1.5.0-alpha

Other

push

tcpflow-1.*

tcpflow-1.2.5

tcpflow-1.2.7

tcpflow-1.2.9

tcpflow-1.3.0

tcpflow-1.4.0

tcpflow-1.4.1

tcpflow-1.4.2

tcpflow-1.4.3

tcpflow-1.4.5

tcpflow-1.5.0alpha

Database specific

vanir_signatures_modified

"2026-07-08T14:14:41Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14938.json"

vanir_signatures

[
    {
        "id": "CVE-2018-14938-1855abe7",
        "digest": {
            "line_hashes": [
                "263431917898089951272887722306756947082",
                "16960705493334843210741211398048974095",
                "329830292726982711965374785293791456977",
                "302800325138827059724578790507507565090",
                "87336336488400855913637102334681372717",
                "270457403820026149546639844305609165613",
                "261449765198992541675110649674818872159",
                "331162596895031128530210437412462671802",
                "140461762237614033428383369468125960998",
                "106277531526314253657753793650176805747",
                "192662580726791560291150438083018470649",
                "245028216154237253443083530987415627845",
                "213075352169121008038102790243621575853",
                "223481960602899988842673701328938352184",
                "104625703489278918060615238661938281748",
                "326895023466895463823077623033758943029",
                "108065930782036769996894486271013632229",
                "318394031558307746219120081869191702298",
                "257359142032850477010271814807194523493"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
        "deprecated": false,
        "target": {
            "file": "src/wifipcap/wifipcap.cpp"
        }
    },
    {
        "id": "CVE-2018-14938-35e18565",
        "digest": {
            "function_hash": "223260786614342259660237873670618925192",
            "length": 566.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
        "deprecated": false,
        "target": {
            "function": "WifiPacket::handle_prism",
            "file": "src/wifipcap/wifipcap.cpp"
        }
    }
]