Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-14681

Опубликовано: 28 июл. 2018
Источник: debian
EPSS Низкий

Описание

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libmspackfixed0.7-1package

Примечания

  • https://github.com/kyz/libmspack/commit/0b0ef9344255ff5acfac6b7af09198ac9c9756c8

  • https://www.openwall.com/lists/oss-security/2018/07/26/1

EPSS

Процентиль: 81%
0.01558
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

CVSS3: 4.4
redhat
почти 8 лет назад

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

CVSS3: 8.8
nvd
больше 7 лет назад

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

CVSS3: 8.8
fstec
почти 8 лет назад

Уязвимость функции kwajd_read_headers библиотеки Libmspack и утилиты разархивации CAB-файлов СabExtract, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 81%
0.01558
Низкий