6.5

CVE-2018-14680

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cabextract ≫ Libmspack Version 0.0.20060920 Update alpha
Cabextract ≫ Libmspack Version 0.3 Update alpha
Cabextract ≫ Libmspack Version 0.4 Update alpha
Cabextract ≫ Libmspack Version 0.5 Update alpha
Cabextract ≫ Libmspack Version 0.6 Update alpha
Cabextract Project ≫ Cabextract Version <= 1.5
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Redhat ≫ Ansible Tower Version 3.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.75% 0.885
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://access.redhat.com/errata/RHSA-2018:3505
Third Party Advisory
http://www.openwall.com/lists/oss-security/2018/07/26/1
Third Party Advisory
Mailing List
http://www.securitytracker.com/id/1041410
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3327
Third Party Advisory
https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00007.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/201903-20
Third Party Advisory
https://usn.ubuntu.com/3728-1/
Third Party Advisory
https://usn.ubuntu.com/3728-2/
Third Party Advisory
https://usn.ubuntu.com/3728-3/
Third Party Advisory
https://usn.ubuntu.com/3789-2/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4260
Third Party Advisory
https://bugs.debian.org/904801
Patch
Third Party Advisory
Mailing List
Issue Tracking