Critical
Security advisory
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-14938
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:25 UTC · Revision 1
Source evidence
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).
osv:CVE-2018-14938
Complete source record
{
"id": "518aa1902589d768795d0a0b34e95d829b9017e0f8df5f022dc0309cec9393e1",
"url": "https://osv.dev/vulnerability/CVE-2018-14938",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-14938",
"summary": "An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).",
"evidence": "osv:CVE-2018-14938",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2018-14938",
"aliases": [
"CVE-2018-14938"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/simsong/tcpflow",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "7d8133c5772de8ea18184d35a3f69e8dae95ea2f"
},
{
"introduced": "cde661545f824869999360a7b5489c010507662c"
},
{
"last_affected": "cde661545f824869999360a7b5489c010507662c"
},
{
"fixed": "a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:digitalcorpora:tcpflow:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.4.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:digitalcorpora:tcpflow:1.5.0:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.0-alpha"
},
{
"last_affected": "1.5.0-alpha"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"1.5.0-alpha",
"tcpflow-1.5.0alpha",
"tcpflow-1.4.5",
"tcpflow-1.4.3",
"tcpflow-1.4.2",
"tcpflow-1.4.1",
"tcpflow-1.4.0",
"tcpflow-1.3.0",
"tcpflow-1.2.9",
"tcpflow-1.2.7",
"tcpflow-1.2.5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14938.json",
"vanir_signatures": [
{
"id": "CVE-2018-14938-1855abe7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"263431917898089951272887722306756947082",
"16960705493334843210741211398048974095",
"329830292726982711965374785293791456977",
"302800325138827059724578790507507565090",
"87336336488400855913637102334681372717",
"270457403820026149546639844305609165613",
"261449765198992541675110649674818872159",
"331162596895031128530210437412462671802",
"140461762237614033428383369468125960998",
"106277531526314253657753793650176805747",
"192662580726791560291150438083018470649",
"245028216154237253443083530987415627845",
"213075352169121008038102790243621575853",
"223481960602899988842673701328938352184",
"104625703489278918060615238661938281748",
"326895023466895463823077623033758943029",
"108065930782036769996894486271013632229",
"318394031558307746219120081869191702298",
"257359142032850477010271814807194523493"
]
},
"source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
"target": {
"file": "src/wifipcap/wifipcap.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-14938-35e18565",
"digest": {
"length": 566,
"function_hash": "223260786614342259660237873670618925192"
},
"source": "https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
"target": {
"file": "src/wifipcap/wifipcap.cpp",
"function": "WifiPacket::handle_prism"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:29:28Z"
}
}
],
"modified": "2026-10-20T13:29:28.746532660Z",
"provider": "osv",
"references": [
"https://lists.debian.org/debian-lts-announce/2020/11/msg00046.html",
"https://usn.ubuntu.com/3955-1/",
"https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb",
"https://github.com/simsong/tcpflow/issues/182"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "18.10"
},
{
"last_affected": "18.10"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-14938",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387741,
"published_at": "2018-08-05T03:29:00.217+00:00"
}