Vulnerabilities > CVE-2018-8531 - Out-of-bounds Write vulnerability in Microsoft products

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
microsoft
CWE-787
NVD
Published: 2018-10-10
Updated: 2020-08-24

Summary

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Common Weakness Enumeration (CWE)

The Hacker News

idTHN:C3FF55EFF6D358D430A376476FE270D4
last seen2018-10-09
modified2018-10-09
published2018-10-09
reporterThe Hacker News
sourcehttps://thehackernews.com/2018/10/microsoft-windows-update.html
titleMicrosoft October Patch Tuesday Fixes 12 Critical Vulnerabilities

References