What’s Vulnerable › Vulnerabilities

CVE-2018-12684

• Severity: high (CVSS 7.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-22 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.

Affected products

• CivetWeb: through 1.10

References

• https://github.com/civetweb/civetweb/commit/8fd069f6dedb064339f1091069ac96f3f8bdb552
• https://github.com/civetweb/civetweb/issues/633
• https://github.com/civetweb/civetweb/commit/8fd069f6dedb064339f1091069ac96f3f8bdb552
• https://github.com/civetweb/civetweb/issues/633

Get alerted when CVE-2018-12684 or the next vulnerability affects your stack