Unscored CVE-2018-1158 EUVD-2018-11796GHSA-rf5r-vg7q-hgm6

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash th…

Published Aug 23, 2018 · Updated Sep 16, 2024 · Assigned by tenable

Description

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON.

References

https://www.tenable.com/security/research/tra-2018-21
https://mikrotik.com/download/changelogs
https://mikrotik.com/download/changelogs/bugfix-release-tree
20190723 Two vulnerabilities found in MikroTik's RouterOS mailing-list