ISOMAN

CVE

CVE-2018-14679

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2018/07/26/1
  2. http://www.securitytracker.com/id/1041410
  3. https://access.redhat.com/errata/RHSA-2018:3327
  4. https://access.redhat.com/errata/RHSA-2018:3505
  5. https://bugs.debian.org/904802
  6. https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a
  7. https://lists.debian.org/debian-lts-announce/2018/08/msg00007.html
  8. https://security.gentoo.org/glsa/201903-20
  9. https://usn.ubuntu.com/3728-1/
  10. https://usn.ubuntu.com/3728-2/
  11. https://usn.ubuntu.com/3728-3/
  12. https://usn.ubuntu.com/3789-2/
  13. https://www.debian.org/security/2018/dsa-4260
  14. http://www.openwall.com/lists/oss-security/2018/07/26/1
  15. http://www.securitytracker.com/id/1041410
  16. https://access.redhat.com/errata/RHSA-2018:3327
  17. https://access.redhat.com/errata/RHSA-2018:3505
  18. https://bugs.debian.org/904802
  19. https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a
  20. https://lists.debian.org/debian-lts-announce/2018/08/msg00007.html