High
sc — security advisory
SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application context.
- Products
- sc
- Affected versions
- 7.16-1.1.2-1, 7.16-1.1.3-1, 7.16-4, 7.16-4.1, 7.16-4build1, 7.16-4ubuntu1, 7.16-4ubuntu2, 7.16-4ubuntu3
- Fixed versions
- Not specified
- CVEs
- CVE-2018-25222
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:29 UTC · Revision 1
Source evidence
SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application context.
osv:UBUNTU-CVE-2018-25222
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
sc
Fixed versions: Not specified
Complete source record
{
"id": "d4ed676e4e5df4e891f4df02e0fea9a8c6d7157cb9c4c192ef90cab0e60330e2",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-25222",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2018-25222",
"summary": "SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application context.",
"evidence": "osv:UBUNTU-CVE-2018-25222",
"products": [
{
"name": {
"value": "sc",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-4",
"evidence": "/affected/0/versions"
},
{
"value": "7.16-4build1",
"evidence": "/affected/0/versions"
},
{
"value": "7.16-4ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-4ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "7.16-4ubuntu2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-4ubuntu3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-4ubuntu3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-4ubuntu3",
"evidence": "/affected/4/versions"
},
{
"value": "7.16-4.1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-1.1.2-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-1.1.3-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "sc",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.16-1.1.2-1",
"evidence": "/affected/7/versions"
},
{
"value": "7.16-1.1.3-1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2018-25222",
"aliases": [
"UBUNTU-CVE-2018-25222"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"7.16-4",
"7.16-4build1",
"7.16-4ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-4ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"7.16-4ubuntu1",
"7.16-4ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-4ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"7.16-4ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-4ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"7.16-4ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-4ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"7.16-4ubuntu3",
"7.16-4.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-4.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"7.16-1.1.2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-1.1.2-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"7.16-1.1.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-1.1.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "sc",
"purl": "pkg:deb/ubuntu/sc?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"7.16-1.1.2-1",
"7.16-1.1.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25222.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sc",
"binary_version": "7.16-1.1.3-1"
}
]
}
}
],
"modified": "2026-10-17T12:55:26.267968019Z",
"provider": "osv",
"upstream": [
"CVE-2018-25222"
],
"references": [
"https://ubuntu.com/security/CVE-2018-25222",
"https://www.cve.org/CVERecord?id=CVE-2018-25222",
"https://www.exploit-db.com/exploits/44279",
"https://www.vulncheck.com/advisories/sc-stack-based-buffer-overflow-remote-code-execution"
]
},
"related_cves": [
{
"value": "CVE-2018-25222",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/1/score"
},
"source_id": "core-osv",
"document_id": 353762,
"published_at": "2026-03-28T12:16:00+00:00"
}