Veracode Vulnerability DatabaseVERACODE:19569Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
libmspack is vulnerable to denial of service (DoS) attacks. This vulnerability exists in an unknown part of the file mspack/chmd.c of the component CHM Filename Handler. The manipulation as a part of a blank file name could cause an application crash affecting the availability of the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libmspack | eq | 0.5__0.0.6.alpha.el7 |
References
www.openwall.com/lists/oss-security/2018/07/26/1
www.securitytracker.com/id/1041410
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
access.redhat.com/errata/RHSA-2018:3327
access.redhat.com/errata/RHSA-2018:3505
access.redhat.com/security/updates/classification/#low
bugs.debian.org/904801
github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a
lists.debian.org/debian-lts-announce/2018/08/msg00007.html
security.gentoo.org/glsa/201903-20
usn.ubuntu.com/3728-1/
usn.ubuntu.com/3728-2/
usn.ubuntu.com/3728-3/
usn.ubuntu.com/3789-2/
www.debian.org/security/2018/dsa-4260
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P