PT-2018-14529 · Microsoft+4 · Libmspack+4

Hanno Böck

·

CVE-2018-18585

·

Publicado

2018-10-22

·

Atualizado

2025-10-01

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.8alpha
Description The issue arises from the chmd read headers function in mspack/chmd.c, which improperly handles filenames starting with '0' as their first or second character. This could potentially lead to unintended behavior when processing such filenames.
Recommendations For versions prior to 0.8alpha, update to version 0.8alpha or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CESA-2019_2049
CVE-2018-18585
DLA-1555-1
MGASA-2018-0455
OPENSUSE-SU-2024:13619-1
RHSA-2019:2049
RHSA-2019_2049
SUSE-SU-2019:0748-1
SUSE-SU-2019:13992-1
SUSE-SU-2020:2711-1
USN-3814-1
USN-3814-2
USN-3814-3
USN-7788-1

Produtos afetados

Centos
Red Hat
Suse
Ubuntu
Libmspack