CVE-2018-11017

2018-05-1321:29:00

Google

osv.dev

9.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

CPENameOperatorVersion
libmingeqming-0_4_7
libmingeqming-0_4_0_rc2
libmingeqming-0_4_4
libmingeqming-0_4_0_beta5
libmingeqming-0_4_0_beta4
libmingeqming-0_4_6
libmingeqming-0_4_5
libmingeqming-0_3_0
libmingeqming-0_4_3
libmingeqming-0_4_8

Name	Operator	Version
libming	eq	ming-0_4_7
libming	eq	ming-0_4_0_rc2
libming	eq	ming-0_4_4
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_4_6
libming	eq	ming-0_4_5
libming	eq	ming-0_3_0
libming	eq	ming-0_4_3
libming	eq	ming-0_4_8