CVE-2018-14938: Canonical Ubuntu Linux

Critical severity, CVSS 9.1. EPSS: 2.8% chance of exploitation in the next 30 days.

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 18.10 only
• Digitalcorpora Tcpflow: up to and including 1.4.5; version 1.5.0 only

Published 2018-08-05. Last modified 2026-06-17.