CVE-2018-14679
28.07.2018, 23:29
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cabextract | libmspack | 0.0.20060920:alpha |
| cabextract | libmspack | 0.3:alpha |
| cabextract | libmspack | 0.4:alpha |
| cabextract | libmspack | 0.5:alpha |
| cabextract | libmspack | 0.6:alpha |
| cabextract_project | cabextract | 𝑥 ≤ 1.5 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| redhat | ansible_tower | 3.3 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| canonical | ubuntu_linux | 12.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| clamav |
| ||||||||||||||||||||||
| libmspack |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| clamav |
| ||||||||||||||||||||||||||||||||||||
| clamav-devel |
| ||||||||||||||||||||||||||||||||||||
| clamav-docs-html |
| ||||||||||||||||||||||||||||||||||||
| clamav-milter |
| ||||||||||||||||||||||||||||||||||||
| libclamav12 |
| ||||||||||||||||||||||||||||||||||||
| libclammspack0 |
| ||||||||||||||||||||||||||||||||||||
| libfreshclam3 |
| ||||||||||||||||||||||||||||||||||||
| libmspack-devel |
| ||||||||||||||||||||||||||||||||||||
| libmspack0 |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References