CVE-2018-18584

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:*
cpe:2.3:a:libmspack_project:libmspack:0.4:alpha:*:*:*:*:*:*
cpe:2.3:a:libmspack_project:libmspack:0.3:alpha:*:*:*:*:*:*
cpe:2.3:a:libmspack_project:libmspack:0.6:alpha:*:*:*:*:*:*
cpe:2.3:a:libmspack_project:libmspack:0.7:alpha:*:*:*:*:*:*
cpe:2.3:a:libmspack_project:libmspack:0.7.1:alpha:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:12:ga:*:*:ltss:*:*:*

Configuration 6 (hide)

cpe:2.3:a:starwindsoftware:starwind_virtual_san:-:*:*:*:*:vsphere:*:*

Information

Published : 2018-10-22 19:29

Updated : 2022-10-25 09:49


NVD link : CVE-2018-18584

Mitre link : CVE-2018-18584


JSON object : View

CWE
CWE-787

Out-of-bounds Write

Advertisement

dedicated server usa

Products Affected

cabextract_project

  • cabextract

redhat

  • enterprise_linux

libmspack_project

  • libmspack

canonical

  • ubuntu_linux

debian

  • debian_linux

suse

  • linux_enterprise_server

starwindsoftware

  • starwind_virtual_san