Home

CVE-2018-19208

Description

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.406

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2018:3812-1(SUSE Linux Enterprise Desktop 12-SP3 ) libwpd-0_10-10-0.10.2-2.7.1.x86_64.rpmLinux
SUSE-SU-2018:3812-1(SUSE Linux Enterprise Desktop 12-SP3 ) libwpd-0_10-10-debuginfo-0.10.2-2.7.1.x86_64.rpmLinux
SUSE-SU-2018:3812-1(SUSE Linux Enterprise Desktop 12-SP3 ) libwpd-debugsource-0.10.2-2.7.1.x86_64.rpmLinux
SUSE-SU-2018:3812-2(SUSE Linux Enterprise Desktop 12-SP4 ) libwpd-0_10-10-0.10.2-2.7.1.x86_64.rpmLinux
SUSE-SU-2018:3812-2(SUSE Linux Enterprise Desktop 12-SP4 ) libwpd-0_10-10-debuginfo-0.10.2-2.7.1.x86_64.rpmLinux
SUSE-SU-2018:3812-2(SUSE Linux Enterprise Desktop 12-SP4 ) libwpd-debugsource-0.10.2-2.7.1.x86_64.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-0.10.0-2.el7.i686.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-0.10.0-2.el7.x86_64.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-devel-0.10.0-2.el7.i686.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-devel-0.10.0-2.el7.x86_64.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-doc-0.10.0-2.el7.noarch.rpmLinux
(RHSA-2019:2126) libwpd security update libwpd-tools-0.10.0-2.el7.x86_64.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-0.10.0-2.el7.i686.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-0.10.0-2.el7.x86_64.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-devel-0.10.0-2.el7.i686.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-devel-0.10.0-2.el7.x86_64.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-doc-0.10.0-2.el7.noarch.rpmLinux
(CESA-2019:2126) libwpd security update libwpd-tools-0.10.0-2.el7.x86_64.rpmLinux
(RHSA-2019:2126)Low: security update libwpd-debuginfo-0.10.0-2.el7.i686.rpmLinux
(RHSA-2019:2126)Low: security update libwpd-debuginfo-0.10.0-2.el7.x86_64.rpmLinux
Libwpd update (ELSA-2019-2126) libwpd-0.10.0-2.el7.i686.rpmLinux
Libwpd update (ELSA-2019-2126) libwpd-0.10.0-2.el7.x86_64.rpmLinux
libwpd Security Update (ALAS-2019-1311) libwpd-0.10.0-2.amzn2.i686.rpmLinux
libwpd Security Update (ALAS-2019-1311) libwpd-0.10.0-2.amzn2.x86_64.rpmLinux
libwpd Security Update (ALAS-2019-1311) libwpd-doc-0.10.0-2.amzn2.noarch.rpmLinux
libwpd Security Update (ALAS-2019-1311) libwpd-devel-0.10.0-2.amzn2.x86_64.rpmLinux
libwpd Security Update (ALAS-2019-1311) libwpd-tools-0.10.0-2.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234