CVE-2018-6183 Privilege escalation in n/a
Local attackers can gain privileges or cause denial of service by impersonating insecurely created named pipes in BitDefender Total Security.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-6183?
CVE-2018-6183 is a high-severity vulnerability in n/a, published on 12 Mar 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an "insecurely created named pipe". Ensures full access to Everyone users group.
Which versions are affected by CVE-2018-6183?
It affects 1 product.
Products include Bitdefender Total Security.
How do I fix CVE-2018-6183?
No fix has been published for CVE-2018-6183 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6183 being exploited?
There is no known exploitation of CVE-2018-6183 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2023-49567 Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)
- CVE-2023-49570 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
- CVE-2023-6055 Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)
- CVE-2023-6056 Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
- CVE-2023-6057 Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)
Sources
Also known as GHSA-wqgv-cf28-r9x6.