Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-18584 →
DEBIAN-CVE-2018-18584
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
cabextract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]
Debian:13
cabextract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]
Debian:14
cabextract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]
Debian:12
libmspack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-1"}]}]
Debian:13
libmspack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-1"}]}]
Debian:14
libmspack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-1"}]}]
Références
- advisory security-tracker.debian.org