ALPINE-CVE-2018-14681 PUBLISHED CVSS 8.800000190734863 HIGH

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

Risk Scores

CVSS v3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.13clamav0.100.1-r1, 0.100.1-r0, 0.100.0-r2
Alpine:v3.9clamav0.98.4-r0, 0.99.4-r1, 0.99.4-r0
Alpine:v3.12clamav0, 0.100.0-r0, 0.100.0-r1
Alpine:v3.11libmspack0, 0.5, 0
Alpine:v3.8libmspack0, 0.5, 0
Alpine:v3.8clamav0.99.4-r1, 0, 0.100.0-r0
Alpine:v3.7clamav0.96.1-r0, 0, 0.100.1-r0
Alpine:v3.5libmspack*, 0.5, 0
Alpine:v3.6libmspack0.5_alpha-r1, 0, *
Alpine:v3.6clamav0.96.4-r0, 0.96.5-r0, 0.94.2-r2
Alpine:v3.11clamav0.94.2-r0, 0.99-r3, 0.99-r2
Alpine:v3.9libmspack0.5, 0, 0
Alpine:v3.10clamav0.97.6-r1, 0.99.4-r0, 0.96.1-r0
Alpine:v3.10libmspack0, 0.5, 0
Alpine:v3.7libmspack0, 0.5, 0

Timeline

References

Open in Interactive Console →