medium6.5
CVE-2018-7872
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data.
Impact
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libming | Libming | Version 0.4.8 |
| Debian | Debian Linux | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
- https://github.com/libming/libming/issues/114
- https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
- https://github.com/libming/libming/issues/114
- https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html