What’s Vulnerable › Vulnerabilities

CVE-2018-8065

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 75.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-03-12 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs.

Affected products

• SyncBreeze: 10.6.24

References

• http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html
• https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS
• https://github.com/rapid7/metasploit-framework/pull/9701
• http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html
• https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS
• https://github.com/rapid7/metasploit-framework/pull/9701

Get alerted when CVE-2018-8065 or the next vulnerability affects your stack