Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-17570: ViaBTC Exchange Server can corrupt memory due to overflow

CVE-2018-17570 · published 8 years ago

Summary

The server software for ViaBTC Exchange may mishandle certain numbers, causing it to write over memory it shouldn't. This can lead to crashes or allow an attacker to take control of the server. Upgrade to a version released after August 21, 2018, or apply the vendor’s security patch as soon as possible.

What to do

Update viabtc viabtc_exchange_server to version 2018-08-21 or later.

Affected software

Vendor	Product	Affected versions
viabtc	viabtc_exchange_server	< 2018-08-21 `cpe:2.3:a:viabtc:viabtc_exchange_server::::::::`

Original advisory text

utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.

References

https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857... Patch Third Party Advisory
https://github.com/viabtc/viabtc_exchange_server/pull/131 Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-190Integer Overflow

Timeline

Published26 Sep 2018

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2018-17570 · NVD

Track software like this

Free during beta