CVE-2019-17263
Low
Description
In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported. NOTE: the vendor has disputed this as described in the GitHub issue
SeverityLow
CVSS3.3
Exploit probability—
ProductLibfwsi
PublishedOct 6, 2019
First seenOct 6, 2019
How to fix
Update
- libfwsi_project libfwsi20191006 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libfwsi_project libfwsi | v < 20191006 | 20191006 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.