Home

CVE-2018-18584

Description

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
6.374

Associated Vulnerability

VulnerabilityOS Platform
Anti-virus utility for Unix (USN-3722-3) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_amd64.debLinux
Anti-virus utility for Unix (USN-3722-3) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_i386.debLinux
Anti-virus utility for Unix (USN-3728-2) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_amd64.debLinux
Anti-virus utility for Unix (USN-3728-2) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_i386.debLinux
Anti-virus utility for Unix (USN-3722-5) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_i386.debLinux
Anti-virus utility for Unix (USN-3722-5) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_amd64.debLinux
Anti-virus utility for Unix (USN-3789-1) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_amd64.debLinux
Anti-virus utility for Unix (USN-3789-1) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_i386.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.6-3ubuntu0.2_i386.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.6-3ubuntu0.2_amd64.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.7-1ubuntu0.1_i386.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.7-1ubuntu0.1_amd64.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.5-1ubuntu0.16.04.3_i386.debLinux
library for Microsoft compression formats (USN-3814-1) libmspack0_0.5-1ubuntu0.16.04.3_amd64.debLinux
Anti-virus utility for Unix (USN-3814-2) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_i386.debLinux
Anti-virus utility for Unix (USN-3814-2) clamav_0.100.2+dfsg-1ubuntu0.14.04.2_amd64.debLinux
SUSE-SU-2019:13992-1(SUSE Linux Enterprise Server 11-SP4 ) libmspack0-0.0.20060920alpha-74.11.6.1.i586.rpmLinux
SUSE-SU-2019:13992-1(SUSE Linux Enterprise Server 11-SP4 ) libmspack0-0.0.20060920alpha-74.11.6.1.x86_64.rpmLinux
(RHSA-2019:2049) libmspack security update libmspack-0.5-0.7.alpha.el7.i686.rpmLinux
(RHSA-2019:2049) libmspack security update libmspack-0.5-0.7.alpha.el7.x86_64.rpmLinux
(RHSA-2019:2049) libmspack security update libmspack-devel-0.5-0.7.alpha.el7.i686.rpmLinux
(RHSA-2019:2049) libmspack security update libmspack-devel-0.5-0.7.alpha.el7.x86_64.rpmLinux
(CESA-2019:2049) libmspack security update libmspack-0.5-0.7.alpha.el7.i686.rpmLinux
(CESA-2019:2049) libmspack security update libmspack-0.5-0.7.alpha.el7.x86_64.rpmLinux
(CESA-2019:2049) libmspack security update libmspack-devel-0.5-0.7.alpha.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234