CVE-2018-18584
Medium
Description
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Cabextract
PublishedOct 23, 2018
First seenOct 23, 2018
How to fix
Update
- cabextract_project cabextract1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cabextract_project cabextract | v < 1.8 | 1.8 |
| libmspack_project libmspack | 0.3, 0.4, 0.5, 0.6, 0.7, 0.7.1 | — |
| debian debian_linux | 8.0 | — |
| redhat enterprise_linux | 7.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04, 18.10 | — |
| suse linux_enterprise_server | 11, 12 | — |
| starwindsoftware starwind_virtual_san | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.