NetSight
IP …
high7.8

CVE-2019-18218

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out…

Impact

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

Affected products

VendorProductAffected versions
File ProjectFile
through 5.37
DebianDebian Linux
Versions 8.0, 9.0, 10.0
OpensuseLeap
Version 15.1
NetappActive Iq Unified Manager
from 7.3
FedoraprojectFedora
Versions 29, 30, 31
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.04, 19.10

Weakness classification

CWE-787

References