Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-6419 PUBLISHED CVSS 7.800000190734863 HIGH

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.4libmspack0, 0, 0
Alpine:v3.11clamav0.98.5-r0, 0, 0.94.2-r0
Alpine:v3.8libmspack0, 0, 0
Alpine:v3.7libmspack0, 0, 0
Alpine:v3.12clamav0.98.6-r2, 0.99.3-r3, 0.99.3-r2
Alpine:v3.13clamav0.98.4-r1, 0, 0.94.2-r0
Alpine:v3.5libmspack0, 0, 0
Alpine:v3.8clamav0.99-r2, 0.98.6-r2, 0.94.2-r0
Alpine:v3.9libmspack0, 0, 0
Alpine:v3.6libmspack0, 0, 0
Alpine:v3.10clamav0.99.1-r2, 0.99.1-r1, 0.99.1-r0
Alpine:v3.9clamav0.98.6-r2, 0, 0.94.2-r0
Alpine:v3.11libmspack0, 0, 0
Alpine:v3.10libmspack0, 0, 0
Alpine:v3.3libmspack0, 0, 0

Timeline

References

Open in Interactive Console →