high7.5Public exploit code
CVE-2018-8065
An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit)2023-05-31 · remote · multiple
Impact
An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flexense | Syncbreeze | Version 10.6.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html
- https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS
- https://github.com/rapid7/metasploit-framework/pull/9701
- http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html
- https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS
- https://github.com/rapid7/metasploit-framework/pull/9701