Vulnerability Details : CVE-2018-20542
Potential exploit
There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).
Vulnerability category: Overflow
Products affected by CVE-2018-20542
- cpe:2.3:a:libxsmm_project:libxsmm:1.10:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-20542
0.48%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 63 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-20542
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2018-20542
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-20542
-
https://bugzilla.redhat.com/show_bug.cgi?id=1652635
1652635 – There is a heap-buffer-overflow that the heap is allocated at src/generator_spgemm_csc_reader.c:125 and triggered at function libxsmm_sparse_csc_reader in libxsmm.Exploit;Issue Tracking;Third Party Advisory
-
https://github.com/hfp/libxsmm/issues/287
reported buffer overflows · Issue #287 · hfp/libxsmm · GitHubExploit;Patch;Third Party Advisory
-
https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
Issue #287: made CSR/CSC readers more robust against invalid input (c… · hfp/libxsmm@1514814 · GitHubPatch;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1652633
1652633 – There is a heap-buffer-overflow at src/generator_spgemm_csc_reader.c:178(function libxsmm_sparse_csc_reader) that allocated at src/generator_spgemm_csc_reader.c:125 in libxsmm.Issue Tracking;Exploit;Third Party Advisory
Jump to