CVE-2018-17141
published 2018-09-21CVE-2018-17141: HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled…
PriorityP352critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
5.59%
92.1th percentile
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | hylafax | < hylafax 3:6.0.6-8.1 (bookworm) | hylafax 3:6.0.6-8.1 (bookworm) |
| hylafax | hylafax | — | — |
| hylafax | hylafax | — | — |
| hylafax | hylafax | >= 0 < 3:6.0.6-8.1 | 3:6.0.6-8.1 |
| hylafax | hylafax | >= 0 < 3:6.0.6-8.1 | 3:6.0.6-8.1 |
| hylafax | hylafax | >= 0 < 3:6.0.6-8.1 | 3:6.0.6-8.1 |
| hylafax | hylafax | >= 0 < 3:6.0.6-8.1 | 3:6.0.6-8.1 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2018-17141: hylafax - HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary cod...
vendor_debian·2018·CVSS 9.8
CVE-2018-17141 [CRITICAL] CVE-2018-17141: hylafax - HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary cod...
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Scope: local
bookworm: resolved (fixed in 3:6.0.6-8.1)
bullseye: resolved (fixed in 3:6.0.6-8.1)
forky: resolved (fixed in 3:6.0.6-8.1)
sid: resolved (fixed in 3:6.0.6-8.1)
trixie: resolved (fixed in 3:6.0.6-8.1)
GHSA
GHSA-56vg-g8vf-f4v4: HylaFAX 6
ghsa_unreviewed·2022-05-13
CVE-2018-17141 [CRITICAL] CWE-824 GHSA-56vg-g8vf-f4v4: HylaFAX 6
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
OSV
CVE-2018-17141: HylaFAX 6
osv·2018-09-21·CVSS 9.8
CVE-2018-17141 [CRITICAL] CVE-2018-17141: HylaFAX 6
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027behttp://www.openwall.com/lists/oss-security/2018/09/20/1https://lists.debian.org/debian-lts-announce/2018/09/msg00026.htmlhttps://seclists.org/bugtraq/2018/Sep/49https://www.debian.org/security/2018/dsa-4298https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027behttp://www.openwall.com/lists/oss-security/2018/09/20/1https://lists.debian.org/debian-lts-announce/2018/09/msg00026.htmlhttps://seclists.org/bugtraq/2018/Sep/49https://www.debian.org/security/2018/dsa-4298https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/
2018-09-21
Published