610 matches found
EulerOS 2.0 SP3 : libmspack (EulerOS-SA-2019-2609)
According to the versions of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the...
EulerOS 2.0 SP5 : libmspack (EulerOS-SA-2019-2534)
According to the versions of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the...
EulerOS 2.0 SP2 : libmspack (EulerOS-SA-2019-2454)
According to the versions of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the...
NewStart CGSL CORE 5.04 / MAIN 5.04 : libmspack Multiple Vulnerabilities (NS-SA-2019-0217)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libmspack packages installed that are affected by multiple vulnerabilities: - An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity...
EulerOS 2.0 SP8 : libmspack (EulerOS-SA-2019-2285)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the '/\0'...
EulerOS 2.0 SP3 : libmspack (EulerOS-SA-2019-2261)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum...
Amazon Linux 2 : libmspack (ALAS-2019-1310)
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.CVE-2018-18584 chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' a...
CVE-2018-14679
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service uninitialized data dereference and application crash...
CVE-2018-18584
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...
Medium: libmspack
Issue Overview: In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.CVE-2018-18584 chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename...
Critical Photon OS Security Update - PHSA-2019-0196
Updates of 'oniguruma', 'ruby', 'git', 'libmspack', 'libxslt', 'subversion', 'libssh2' packages of Photon OS have been released...
EulerOS 2.0 SP3 : libmspack (EulerOS-SA-2019-2034)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in...
EulerOS 2.0 SP2 : libmspack (EulerOS-SA-2019-1852)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in...
EulerOS 2.0 SP5 : libmspack (EulerOS-SA-2019-1899)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in...
MGASA-2019-0248 Updated libmspack packages fix security vulnerability
Updated libmspack packages fix security vulnerability: It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information CVE-2019-1010305...
Updated libmspack packages fix security vulnerability
Updated libmspack packages fix security vulnerability: It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information CVE-2019-1010305...
CentOS 7 : libmspack (CESA-2019:2049)
An update for libmspack is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
EulerOS 2.0 SP8 : libmspack (EulerOS-SA-2019-1829)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in...
Scientific Linux Security Update : libmspack on SL7.x x86_64 (20190806)
Security Fixes : - libmspack: Out-of-bounds write in mspack/cab.h CVE-2018-18584 - libmspack: chmdreadheaders fails to reject filenames containing NULL bytes CVE-2018-18585 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...
Photon OS 1.0: Libmspack PHSA-2019-1.0-0247
An update of the libmspack package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0247. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...