Unscored CVE-2018-7872 EUVD-2018-19584GHSA-hg7q-4phv-fpg2

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes…

Published Mar 8, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 7	ming	1:0.4.4-1.1+deb7u8	DLA-1343-1

Ubuntu