CVE-2019-12968 A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2.

Medium 5.3 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2019-12968?

CVE-2019-12968 is a medium-severity vulnerability in n/a, published on 26 Jun 2019.

Official description

A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to cause a potential crash / denial of service in Doomseeker. The issue has been remediated in the Doomseeker 1.3 release with source code patches to the SRB2 plugin.

Weakness: CWE-119

Which versions are affected by CVE-2019-12968?

It affects 1 product.

Products include Drdteam Doomseeker.

How do I fix CVE-2019-12968?

No fix has been published for CVE-2019-12968 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-12968 being exploited?

There is no known exploitation of CVE-2019-12968 in the wild and no public exploit code.

Sources

Also known as GHSA-8fw7-x954-66rg.

Is CVE-2019-12968 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free