Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-5345
HistoryJan 12, 2018 - 12:29 a.m.

CVE-2018-5345

2018-01-1200:29:00
CWE-787
[email protected]
web.nvd.nist.gov
66
cve-2018-5345
buffer overflow
gnome gcab
nvd
security vulnerability
arbitrary code execution
stack-based buffer overflow
.cab file

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.3%

JSON

A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.

Related

oraclelinux 1
redhatcve 1
osv 1
openvas 6
freebsd 1
nessus 10
fedora 2
prion 1
mageia 1
debiancve 1
redhat 1
cvelist 1
debian 2
ubuntu 1
ubuntucve 1
centos 1
oraclelinux
oraclelinux
gcab security update
2018-02-26 00:00:00
redhatcve
redhatcve
CVE-2018-5345
2018-01-12 01:49:43
osv
osv
gcab - security update
2018-01-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3546-1)
2018-01-25 00:00:00
CentOS Update for gcab CESA-2018:0350 centos7
2018-03-01 00:00:00
Mageia: Security Advisory (MGASA-2018-0111)
2022-01-28 00:00:00
freebsd
freebsd
gcab -- stack overflow
2018-01-23 00:00:00
nessus
nessus
NewStart CGSL CORE 5.04 / MAIN 5.04 : gcab Vulnerability (NS-SA-2019-0020)
2019-08-12 00:00:00
Scientific Linux Security Update : gcab on SL7.x x86_64 (20180226)
2018-02-27 00:00:00
RHEL 7 : gcab (RHSA-2018:0350)
2018-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: gcab-1.1-1.fc26
2018-02-27 16:57:45
[SECURITY] Fedora 27 Update: gcab-1.0-1.fc27
2018-01-30 18:12:18
prion
prion
Stack overflow
2018-01-12 00:29:00
mageia
mageia
Updated gcab packages fix security vulnerability
2018-02-06 09:25:44
debiancve
debiancve
CVE-2018-5345
2018-01-12 00:29:00
redhat
redhat
(RHSA-2018:0350) Important: gcab security update
2018-02-26 17:04:59
cvelist
cvelist
CVE-2018-5345
2018-01-12 00:00:00
debian
debian
[SECURITY] [DSA 4095-1] gcab security update
2018-01-24 20:27:50
[SECURITY] [DSA 4095-1] gcab security update
2018-01-24 20:28:10
ubuntu
ubuntu
gcab vulnerability
2018-01-24 00:00:00
ubuntucve
ubuntucve
CVE-2018-5345
2018-01-11 00:00:00
centos
centos
gcab, libgcab1 security update
2018-02-28 11:25:25

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.3%

JSON
Related for CVE-2018-5345
oraclelinux1redhatcve1osv1openvas6freebsd1nessus10fedora2prion1mageia1debiancve1redhat1cvelist1debian2ubuntu1ubuntucve1centos1