CVE-2018-1985

IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a…

Medium4.4EPSS 0.33%

Published: 24 Aug 2020
Updated: 16 Sept 2024
Reserved: 13 Dec 2017
Assigned by: ibm

Description

IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207.

Timeline

2017
13 Dec 2017
13 Dec 2017
ID reserved
By ibm
2020
24 Aug 20203 years later
24 Aug 2020· 3 years later
Published
2024
16 Sept 20244 years later
16 Sept 2024· 4 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2018-1985, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium4.4	CVSS:3.0/I:N/UI:N/AC:L/C:N/AV:L/S:U/PR:H/A:H/E:U/RL:O/RC:C
NVDNVD · Modified	3.1	Medium4.4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.33% · top 74% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.

Weakness

Denial of Service
CWE-120 (opens in a new tab)All about CWE-120 and its CVEs

Affected products

IBM · Security Trusteer Rapport
- affected 3.6.1908.22
IBM · Security Rapport for MacOS
- affected 3.6.1908.22

References (2)

https://www.ibm.com/support/docview.wss?uid=ibm10869212 (opens in a new tab)x_refsource_CONFIRMx_transferred
ibm-trusteer-cve20181985-dos (154207) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1985](https://cveledger.app/badge/CVE-2018-1985.svg)](https://cveledger.app/cve/CVE-2018-1985)

Record last updated 16 Sept 2024, 16:32 UTC.