Unscored CVE-2018-7871 EUVD-2018-19583GHSA-fgqj-xvhp-7cv2

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input wi…

Published Mar 8, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 7	ming	1:0.4.4-1.1+deb7u8	DLA-1343-1

Ubuntu