Skip to content
OpenAdvisories
Low ALAS2-2019-1311 1 CVE

Low: libwpd security update (Amazon Linux 2)

Published Oct 8, 2019 · Updated Oct 9, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-19208: In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h. 99999: CVE-2018-19208 libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 libwpd 0:0.10.0-2.amzn2
Amazon Linux · 2 libwpd-debuginfo 0:0.10.0-2.amzn2
Amazon Linux · 2 libwpd-devel 0:0.10.0-2.amzn2
Amazon Linux · 2 libwpd-doc 0:0.10.0-2.amzn2
Amazon Linux · 2 libwpd-tools 0:0.10.0-2.amzn2

Vulnerabilities 1

  • Unscored —
    CVE-2018-19208

    In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentList…

    libwpd libwpd Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-19208.html