Описание
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Отчет
This issue affects the versions of libmspack as shipped with Red Hat Enterprise Linux 7.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | libmspack | Not affected | ||
| Red Hat Enterprise Linux 7 | libmspack | Fixed | RHSA-2018:3327 | 30.10.2018 |
Показывать по
Дополнительная информация
Статус:
4 Medium
CVSS3
Связанные уязвимости
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. ...
4 Medium
CVSS3