First published: Fri Oct 11 2019(Updated: )
Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Boa Boa | <=0.94.14.21 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-21028 is a vulnerability in Boa 0.94.14rc21 that allows remote attackers to trigger a memory leak due to missing calls to the free function.
Boa 0.94.14rc21 allows remote attackers to trigger a memory leak by not making the necessary calls to the free function.
CVE-2018-21028 has a severity level of high, with a CVSS score of 7.5.
CVE-2018-21028 affects Boa versions up to and including 0.94.14rc21.
To fix CVE-2018-21028, update Boa to a version that includes the fix.