CVE-2018-5704 | BDVDB-2026-95302 Detail

Description#

Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceforge.net/p/openocd/mailman/message/36188041/
https://www.debian.org/security/2018/dsa-4093
https://lists.debian.org/debian-lts-announce/2018/01/msg00027.html

Exploit#

No public exploit known

History#

Version 12018-01-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.