Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:2802-1

Опубликовано: 20 авг. 2021
Источник: suse-cvrf

Описание

Security update for libmspack

This update for libmspack fixes the following issues:

  • CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. (bsc#1103032)
  • CVE-2018-14682: There is an off-by-one error in the TOLOWER() macro for CHM decompression. (bsc#1103032)
  • CVE-2018-14679: There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service. (bsc#1103032)

Список пакетов

openSUSE Leap 15.3
libmspack-devel-0.6-3.11.1
libmspack0-0.6-3.11.1
libmspack0-32bit-0.6-3.11.1
mspack-tools-0.6-3.11.1

Ссылки

Описание

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

Затронутые продукты
openSUSE Leap 15.3:libmspack-devel-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-32bit-0.6-3.11.1
openSUSE Leap 15.3:mspack-tools-0.6-3.11.1
Ссылки

Описание

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

Затронутые продукты
openSUSE Leap 15.3:libmspack-devel-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-32bit-0.6-3.11.1
openSUSE Leap 15.3:mspack-tools-0.6-3.11.1
Ссылки

Описание

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.

Затронутые продукты
openSUSE Leap 15.3:libmspack-devel-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-0.6-3.11.1
openSUSE Leap 15.3:libmspack0-32bit-0.6-3.11.1
openSUSE Leap 15.3:mspack-tools-0.6-3.11.1
Ссылки