CVE-2018-15749 Other in n/a
A format string vulnerability in Pulse Secure Desktop for macOS allows attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-15749?
CVE-2018-15749 is a medium-severity vulnerability in n/a, published on 6 Sep 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.
Weakness: CWE-134
Which versions are affected by CVE-2018-15749?
It affects 1 product.
Products include Pulsesecure Pulse Secure Desktop Client.
How do I fix CVE-2018-15749?
No fix has been published for CVE-2018-15749 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-15749 being exploited?
There is no known exploitation of CVE-2018-15749 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2020-8239 Privilege escalation in Pulse Secure Desktop Cient
- CVE-2020-8254 Path traversal in Pulse Secure Desktop Client
- CVE-2020-8240 Privilege escalation in Pulse Secure Desktop Client
- CVE-2020-8248 Privilege escalation in Pulse Secure Desktop Client
- CVE-2020-8249 Memory corruption in Pulse Secure Desktop Client
Sources
Also known as GHSA-c49m-xjh6-2h4v.