Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1200-1

Опубликовано: 25 авг. 2021
Источник: suse-cvrf

Описание

Security update for libmspack

This update for libmspack fixes the following issues:

  • CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. (bsc#1103032)
  • CVE-2018-14682: There is an off-by-one error in the TOLOWER() macro for CHM decompression. (bsc#1103032)
  • CVE-2018-14679: There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service. (bsc#1103032)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libmspack-devel-0.6-lp152.6.3.1
libmspack0-0.6-lp152.6.3.1
libmspack0-32bit-0.6-lp152.6.3.1
mspack-tools-0.6-lp152.6.3.1

Ссылки

Описание

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

Затронутые продукты
openSUSE Leap 15.2:libmspack-devel-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-32bit-0.6-lp152.6.3.1
openSUSE Leap 15.2:mspack-tools-0.6-lp152.6.3.1
Ссылки

Описание

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

Затронутые продукты
openSUSE Leap 15.2:libmspack-devel-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-32bit-0.6-lp152.6.3.1
openSUSE Leap 15.2:mspack-tools-0.6-lp152.6.3.1
Ссылки

Описание

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.

Затронутые продукты
openSUSE Leap 15.2:libmspack-devel-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-0.6-lp152.6.3.1
openSUSE Leap 15.2:libmspack0-32bit-0.6-lp152.6.3.1
openSUSE Leap 15.2:mspack-tools-0.6-lp152.6.3.1
Ссылки