PT-2019-15133 · Libyal+1 · Liblnk+1

C0D3Xpl0It · Published 2019-10-09 · Updated 2024-08-05 · CVE-2019-17401

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libyal liblnk version 20191006

Description The issue is related to a heap-based buffer over-read in the network share name offset>20 code block of liblnk location information read data in liblnk location information.c. This is a distinct problem. The vendor has disputed the description of this issue, as noted in a GitHub discussion.

Recommendations For libyal liblnk version 20191006, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-17401

Affected Products

Debian

Liblnk

References · 9

• 🔥 https://github.com/libyal/liblnk/issues/40 · Exploit
• https://cve.org/CVERecord?id=CVE-2019-17401 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17401 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-17401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17401 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-17401 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-17401 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-17401 · Vendor Advisory
• https://t.me/cvenotify/89101 · Telegram Post