CVE-2018-6644
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a...
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- Record
CVE-2018-6644- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- Record
CVE-2018-6644- Updated
- 2026-11-02
EUVDEUVD-2018-18391 No score
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- Record
EUVD-2018-18391- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-84x3-c759-r67j
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a...
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- Record
GHSA-84x3-c759-r67j- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-6644
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- Record
UBUNTU-CVE-2018-6644- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11368-1 No score
sblim-sfcb-1.4.9-13.6 on GA media
These are all security issues fixed in the sblim-sfcb-1.4.9-13.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11368-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sblim-sfcbUbuntu:16.04:LTS |
All versions, plus listed versions 1.4.8-0ubuntu2 |
None known |
sblim-sfcbUbuntu:18.04:LTS |
All versions, plus listed versions 1.4.9-0ubuntu11.4.9-0ubuntu31.4.9-0ubuntu5 |
None known |
sblim-sfcbUbuntu:20.04:LTS |
All versions, plus listed versions 1.4.9-0ubuntu5 |
None known |
sblim-sfcbUbuntu:22.04:LTS |
All versions, plus listed versions 1.4.9-0ubuntu51.4.9-0ubuntu7 |
None known |
sblim-sfcbUbuntu:24.04:LTS |
All versions, plus listed versions 1.4.9-0ubuntu71.4.9-0ubuntu91.4.9-0ubuntu10 |
None known |
sblim-sfcbUbuntu:25.10 |
All versions, plus listed versions 1.4.9-0ubuntu10 |
None known |
sblim-sfcbUbuntu:26.04:LTS |
All versions, plus listed versions 1.4.9-0ubuntu10 |
None known |
sblim-sfcbopenSUSE:Tumbleweed |
before 1.4.9-13.6 | 1.4.9-13.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-6644 is a high vulnerability (CVSS 7.5) in Sblim Project Small Footprint Cim Broker, published February 8, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 79th percentile. Fixed in sblim-sfcb 1.4.9-13.6.