cbcvebase.
CVE-2018-18585
published 2018-10-23

CVE-2018-18585: chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

medium4.3CVSS 3.1
AVNACLPRNUIRSUCNINAL
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

Affected

25 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
clamavclamav>= 0 < 0.100.2+dfsg-1ubuntu0.14.04.20.100.2+dfsg-1ubuntu0.14.04.2
debiandebian_linux
debianlibmspack< libmspack 0.8-1 (bookworm)libmspack 0.8-1 (bookworm)
kyzerlibmspack
kyzerlibmspack
kyzerlibmspack
kyzerlibmspack
kyzerlibmspack
libmspack_projectlibmspack>= 0 < 0.8-10.8-1
libmspack_projectlibmspack>= 0 < 0.8-10.8-1
libmspack_projectlibmspack>= 0 < 0.8-10.8-1
libmspack_projectlibmspack>= 0 < 0.8-10.8-1
libmspack_projectlibmspack>= 0 < 0.5-1ubuntu0.16.04.30.5-1ubuntu0.16.04.3
libmspack_projectlibmspack>= 0 < 0.6-3ubuntu0.20.6-3ubuntu0.2
libmspack_projectlibmspack>= 0 < 0.4-1ubuntu0.1~esm20.4-1ubuntu0.1~esm2
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_workstation
suselinux_enterprise_server
suselinux_enterprise_server

CVSS provenance

nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
osv6.5MEDIUM