What’s Vulnerable › Vulnerabilities

CVE-2018-17570

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-09-26 · updated 2026-06-17
• Weakness: CWE-190

Description

utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.

Affected products

• Viabtc Exchange Server: before 2018-08-21 — fixed in 2018-08-21

How to fix

Upgrade to a fixed version: Viabtc Exchange Server 2018-08-21. Check the vendor advisory for mitigations.

References

• https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-515c81af848352583bff286d6224875f
• https://github.com/viabtc/viabtc_exchange_server/pull/131
• https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-515c81af848352583bff286d6224875f
• https://github.com/viabtc/viabtc_exchange_server/pull/131

Get alerted when CVE-2018-17570 or the next vulnerability affects your stack