Summary
It was discovered libmspack incorrectly handled certain malformed CAB files.
A remote attacker could use this issue to cause libmspack to crash, resulting
in a denial of service. (CVE-2018-18584, CVE-2018-18585)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libmspack | 0.5-1ubuntu0.16.04.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | libmspack | 0.6-3ubuntu0.2 |
Vulnerabilities 2
-
Unscored —
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…
-
Unscored —
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…