CVE-2018-7194: Integer Overflow

Q: What is CVE-2018-7194?

CVE-2018-7194 is an integer format vulnerability in the ticket number generator in Enhancesoft osTicket before version 1.10.2.

Q: How does CVE-2018-7194 affect osTicket?

CVE-2018-7194 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) by exploiting a large number of digits in the ticket number format setting.

Q: What is the severity of CVE-2018-7194?

CVE-2018-7194 has a severity rating of 4.9, which is considered medium.

Q: What is the affected software by CVE-2018-7194?

The affected software is osTicket version 1.10.1 by Enhancesoft.

Q: How can CVE-2018-7194 be fixed?

To fix CVE-2018-7194, users should update osTicket to version 1.10.2 or a later version.

Published Mar 27, 2018

Updated

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) via a large number of digits in the ticket number format setting.

Affected Software

2 affected components

osTicket osTicket<=1.10.1

Enhancesoft osTicket<=1.10.1

Event History

Mar 27, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-7194?

CVE-2018-7194 is an integer format vulnerability in the ticket number generator in Enhancesoft osTicket before version 1.10.2.

How does CVE-2018-7194 affect osTicket?

CVE-2018-7194 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) by exploiting a large number of digits in the ticket number format setting.

What is the severity of CVE-2018-7194?

CVE-2018-7194 has a severity rating of 4.9, which is considered medium.

What is the affected software by CVE-2018-7194?

The affected software is osTicket version 1.10.1 by Enhancesoft.

How can CVE-2018-7194 be fixed?