ALPINE-CVE-2019-18218 PUBLISHED CVSS 7.800000190734863 HIGH

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.18file4.26-r1, 5.01-r0, 0
Alpine:v3.20file5.33-r0, 5.04-r1, 5.04-r0
Alpine:v3.12file4.26-r1, 5.00-r0, 5.01-r0
Alpine:v3.7file5.18-r0, 5.15-r0, 5.19-r2
Alpine:v3.8file5.30-r0, 5.31-r0, 5.31-r1
Alpine:v3.15file5.24-r0, 0, 4.26-r1
Alpine:v3.23file5.19-r2, 0, 4.26-r1
Alpine:v3.21file5.25-r0, 5.07-r0, 5.06-r0
Alpine:v3.17file5.04-r0, 5.19-r2, 5.19-r1
Alpine:v3.10file0, 4.26-r1, 5.00-r0
Alpine:v3.16file5.37-r0, 0, 5.00-r0
Alpine:v3.14file5.08-r0, 5.37-r0, 5.36-r1
Alpine:v3.19file5.17-r0, 0, 4.26-r1
Alpine:v3.9file5.36-r0, 0, 4.26-r1
Alpine:v3.11file5.12-r0, 5.14-r0, 5.15-r0
Alpine:v3.22file5.04-r1, 5.12-r0, 5.08-r0
Alpine:v3.13file5.12-r0, 5.14-r0, 5.15-r0

Timeline

References

Open in Interactive Console →