Skip to content

CVE-2018-0101

Double Free: Is CVE-2018-0101 real, exploitable, or a false positive? Here's the community verdict.

☆ Watch

signals

public sources

Exploited in wild
Not listed
CISA KEV
Public exploit
Exploit-DB +1
Metasploit/EDB/PoC
Base severity
10 Critical
CVSS
Exploitation prob.
87%
FIRST EPSS
Weakness
CWE-415 · Double Free
CWE

High severity and high exploitation probability. Prioritise remediation.

public exploits

links to sources — we don’t host code
Exploit-DBGitHub PoC(2)unverified

A working exploit is publicly available from a maintained source. Treat this as higher urgency and verify your exposure.

baseline read

auto · not a community verdict

Likely real & worth prioritising

High base severity and a high real-world exploitation probability both point to a genuine, actively targeted issue.

Based on CVSS · FIRST EPSS

Confirm or dispute →
Affected:Cisco

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device. This vulnerability affects Cisco ASA Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4110 Security Appliance, Firepower 9300 ASA Security Module, Firepower Threat Defense Software (FTD). Cisco Bug IDs: CSCvg35618.

References

NVD MITRE CVE.org

Published

Embed this verdict
TruePositive verdict for CVE-2018-0101
Markdown
[![TruePositive verdict](https://www.truepositive.app/cve/CVE-2018-0101/badge.svg)](https://www.truepositive.app/cve/CVE-2018-0101)
HTML
<a href="https://www.truepositive.app/cve/CVE-2018-0101"><img src="https://www.truepositive.app/cve/CVE-2018-0101/badge.svg" alt="TruePositive verdict for CVE-2018-0101"></a>

Live badge that updates automatically as the community verdict changes.

Community ground truth

Be the first practitioner to weigh in

So far this is only TruePositive's editorial baseline from public sources. Add your real-world verdict below — it becomes the signal the next person triaging this relies on.

🥇 The first 50 practitioners to contribute earn a Founding Contributor badge.

In your experience, is this finding real and exploitable?

awaiting field verdicts
Real, but not a risk here
Not a real issue

Curated baseline: TruePositive's read from public sources is Real & exploitable — a starting point, not a community verdict.

No account needed. Anonymous verdicts post as an unverified signal. Log in to make yours verified and earn reputation.

Field notes & remediation

Verdicts are the quick signal. Notes are the evidence and fixes behind them.

  • 0
    Field note · TruePositive EditorialCurated

    A working public exploit is published for this, so the barrier to attack is low. FIRST EPSS estimates about a 87% chance of exploitation in the next 30 days, which is high relative to most CVEs. It is reachable over the network with no authentication and no user interaction, which is the most dangerous profile. Patch this on priority and confirm the fix holds.

Add a field note or remediationoptional
Note type

What are you adding?

Markdown supported · minimum 20 characters.

Related CVEs

Same weakness: CWE-415 · Double Free.