CVE-2018-5410 Dokan file system driver contains a stack-based buffer overflow
A stack-based buffer overflow in the Dokan file system driver allows attackers to execute arbitrary code with kernel privileges via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-5410?
CVE-2018-5410 is a high-severity memory corruption vulnerability in Dokan Open Source File System, published on 7 Jan 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
Which versions are affected by CVE-2018-5410?
It affects 1 product.
Products include Dokan-Dev Dokany.
How do I fix CVE-2018-5410?
No fix has been published for CVE-2018-5410 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-5410 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-5410 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in Dokan Open Source File System
Sources
Also known as GHSA-353c-4p9g-7m63.