PT-2018-1091 · Sam2P · Sam2P

Fantasy7082 · Published 2018-02-23 · Updated 2020-12-17 · CVE-2018-7554

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sam2p version 0.49.4

Description The issue is related to an invalid free in the ReadImage function in input-bmp.ci, which can cause a segmentation fault. A crafted input can lead to a denial of service or possibly other unspecified impacts. The vulnerability is associated with the use of memory after it has been freed, which can be exploited by a remote attacker to cause a denial of service or other effects.

Recommendations For sam2p version 0.49.4, consider disabling the ReadImage function in input-bmp.ci as a temporary workaround to minimize the risk of exploitation. Restrict the use of crafted inputs to prevent potential denial of service or other impacts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2018-00487

CVE-2018-7554

DLA-1340-1

MGASA-2020-0459

Affected Products

Sam2P

References · 16

• 🔥 https://github.com/pts/sam2p/issues/29 · Exploit
• https://osv.dev/vulnerability/CVE-2018-7554 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7554 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00487 · Security Note
• https://debian.org/lts/security/2017/dla-1127 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-7554 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7554 · Security Note
• https://osv.dev/vulnerability/MGASA-2020-0459 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7554 · Vendor Advisory
• https://debian.org/lts/security/2018/dla-1340 · Vendor Advisory
• https://debian.org/lts/security/2018/dla-1463 · Vendor Advisory
• https://debian.org/lts/security/2017/dla-1185 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0459.html · Security Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 · Note
• https://bugs.mageia.org/show_bug.cgi?id=27746 · Note