Critical severity9.8NVD Advisory· Published Jan 16, 2018· Updated Jun 17, 2026

CVE-2018-5299

Description

A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to memory corruption and possibly remote code execution.

Affected products

Pulsesecure/Pulse Connect Securellm-fuzzy
Range: <8.3R4
Pulsesecure/Policy Securellm-fuzzy
Range: <5.4R4

Patches

Vulnerability mechanics

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43604nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000