CVE-2018-14682
Description
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.141
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2018:3436-1(SUSE Linux Enterprise Desktop 12-SP3 ) clamav-0.100.2-33.18.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3436-1(SUSE Linux Enterprise Desktop 12-SP3 ) clamav-debuginfo-0.100.2-33.18.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3436-1(SUSE Linux Enterprise Desktop 12-SP3 ) clamav-debugsource-0.100.2-33.18.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3441-1(SUSE Linux Enterprise Server 11-SP4 ) clamav-0.100.2-0.20.18.1.i586.rpm | Linux |
| SUSE-SU-2018:3441-1(SUSE Linux Enterprise Server 11-SP4 ) clamav-0.100.2-0.20.18.1.x86_64.rpm | Linux |
| Libmspack update (ELSA-2018-3327) libmspack-0.5-0.6.alpha.el7.x86_64.rpm | Linux |
| Libmspack-devel update (ELSA-2018-3327) libmspack-devel-0.5-0.6.alpha.el7.x86_64.rpm | Linux |
| Libmspack update (ELSA-2018-3327) libmspack-0.5-0.6.alpha.el7.i686.rpm | Linux |
| Libmspack-devel update (ELSA-2018-3327) libmspack-devel-0.5-0.6.alpha.el7.i686.rpm | Linux |
| SUSE-SU-2021:2765-1(SUSE Linux Enterprise Server 12-SP5 ) libmspack-debugsource-0.4-15.10.1.x86_64.rpm | Linux |
| SUSE-SU-2021:2765-1(SUSE Linux Enterprise Server 12-SP5 ) libmspack0-0.4-15.10.1.x86_64.rpm | Linux |
| SUSE-SU-2021:2765-1(SUSE Linux Enterprise Server 12-SP5 ) libmspack0-debuginfo-0.4-15.10.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234