CVE-2018-8049

Published: Apr 3, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service (crash) via crafted packets.

Affected (4)

Products: Unisys: Stealth Svg

Unisys

1 product

Stealth Svg

Configuration A

4 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Unisys Stealth Svg	From 3.0 to 3.0.1999
Unisys Stealth Svg	From 3.2 to 3.2.030
Unisys Stealth Svg	From 3.3 to 3.3.016
Unisys Stealth Svg	Version 2.8

Running on/with	Platform Versions
Ibm Aix	All versions
Linux Linux Kernel	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=48

Source: cve@mitre.org

Vendor Advisory

http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=48

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.