Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-11423 PUBLISHED CVSS 5.5 MEDIUM

The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.

Risk Scores

CVSS v3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.11clamav0.97-r1, 0.97-r3, 0.97.1-r0
Alpine:v3.5libmspack0, 0, 0
Alpine:v3.8clamav0.97.8-r1, 0.99.2-r3, 0
Alpine:v3.4libmspack0, 0, 0
Alpine:v3.11libmspack0, 0, 0
Alpine:v3.9clamav0.96.5-r0, 0.95.1-r1, 0.95.3-r1
Alpine:v3.8libmspack0, 0, 0
Alpine:v3.13clamav0.96.4-r0, 0, 0.94.2-r0
Alpine:v3.9libmspack0, 0, 0
Alpine:v3.10clamav0.99.2-r0, 0.99.3-r3, 0.99.3-r2
Alpine:v3.7libmspack0, 0, 0
Alpine:v3.3libmspack0, 0, 0
Alpine:v3.12clamav0.99-r2, 0.98-r0, 0.97.8-r2
Alpine:v3.6libmspack0, 0, 0
Alpine:v3.10libmspack0, 0, 0

Timeline

References

Open in Interactive Console →