NetSight
IP …
medium6.5

CVE-2018-14679

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

Impact

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

Affected products

VendorProductAffected versions
CabextractLibmspack
Versions 0.0.20060920, 0.3, 0.4, 0.5, 0.6
Cabextract ProjectCabextract
through 1.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0
RedhatAnsible Tower
Version 3.3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-193

References