Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-14679

Fixed in a distro release EPSS 3%

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

Published 2018-07-28 · CVE record · OSV

Products: cabextract libmspack, cabextract_project cabextract, canonical ubuntu_linux, debian_linux, redhat ansible_tower, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Alpine 3.10libmspack0.7.1_alpha-r0
Alpine 3.11libmspack0.7.1_alpha-r0
Alpine 3.5libmspack0.7.1_alpha-r0
Alpine 3.6libmspack0.7.1_alpha-r0
Alpine 3.7libmspack0.7.1_alpha-r0
Alpine 3.8libmspack0.7.1_alpha-r0
Alpine 3.9libmspack0.7.1_alpha-r0
Amazon Linux 2libmspack0.5-0.6.alpha.amzn2.0.1
Amazon Linux 2libmspack-devel0.5-0.6.alpha.amzn2.0.1
Debian 12libmspack0.7-1
Debian 13libmspack0.7-1
Debian 14libmspack0.7-1
Debian 8libmspack0.5-1+deb8u2
Debian 9libmspack0.5-1+deb9u2
Red Hat Enterprise Linux 7libmspack0:0.5-0.6.alpha.el7
Red Hat Enterprise Linux 7libmspack-debuginfo0:0.5-0.6.alpha.el7
Red Hat Enterprise Linux 7libmspack-devel0:0.5-0.6.alpha.el7
SUSE Enterprise Storage 4clamav0.100.1-33.15.2
SUSE Enterprise Storage 7.1clamav1.4.2-150200.8.3.1
SUSE HPE Helion OpenStack 8clamav0.103.4-33.41.1
SUSE Linux Enterprise Desktop 12 SP3clamav0.100.1-33.15.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Micro 5.0libmspack0.6-3.11.1
SUSE Linux Enterprise Micro 5.5clamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP2libmspack0.6-3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP3libmspack0.6-3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP6clamav1.4.2-150600.18.6.1
SUSE Linux Enterprise Point of Sale 11 SP3clamav0.103.4-0.20.41.1
SUSE Linux Enterprise Server 11 SP4-LTSSclamav0.103.4-0.20.41.1
SUSE Linux Enterprise Server 11-SECURITYclamav-openssl10.103.4-0.20.41.1
SUSE Linux Enterprise Server 12 SP1-LTSSclamav0.100.1-33.15.2
SUSE Linux Enterprise Server 12 SP2-BCLclamav0.100.1-33.15.2
SUSE Linux Enterprise Server 12 SP2-BCLclamav0.103.4-33.41.1
SUSE Linux Enterprise Server 12 SP2-LTSSclamav0.100.1-33.15.2
SUSE Linux Enterprise Server 12 SP3clamav0.100.1-33.15.2
SUSE Linux Enterprise Server 12 SP3-BCLclamav0.103.4-33.41.1
SUSE Linux Enterprise Server 12 SP3-LTSSclamav0.103.4-33.41.1
SUSE Linux Enterprise Server 12 SP4-LTSSclamav0.103.4-33.41.1
SUSE Linux Enterprise Server 12 SP5clamav0.103.4-3.12.1
SUSE Linux Enterprise Server 12 SP5-LTSSclamav1.4.2-3.36.1
SUSE Linux Enterprise Server 12-LTSSclamav0.100.1-33.15.2
SUSE Linux Enterprise Server 15 SP3-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Server 15 SP4-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Server 15 SP5-LTSSclamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5clamav1.4.2-3.36.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1clamav0.100.1-33.15.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2clamav0.100.1-33.15.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3clamav0.100.1-33.15.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3clamav0.103.4-33.41.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4clamav0.103.4-33.41.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5clamav0.103.4-3.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3clamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4clamav1.4.2-150200.8.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5clamav1.4.2-150200.8.3.1
SUSE Manager Proxy 4.3clamav1.4.2-150200.8.3.1
SUSE Manager Server 4.3clamav1.4.2-150200.8.3.1
SUSE OpenStack Cloud 7clamav0.100.1-33.15.2
SUSE OpenStack Cloud 8clamav0.103.4-33.41.1
SUSE OpenStack Cloud 9clamav0.103.4-33.41.1
SUSE OpenStack Cloud Crowbar 8clamav0.103.4-33.41.1
SUSE OpenStack Cloud Crowbar 9clamav0.103.4-33.41.1
Ubuntu 14.04 LTSclamav0.100.1+dfsg-1ubuntu0.14.04.3
Ubuntu 16.04 LTSlibmspack0.5-1ubuntu0.16.04.2
Ubuntu 18.04 LTSlibmspack0.6-3ubuntu0.1
Ubuntu Pro 14.04 LTSlibmspack0.4-1ubuntu0.1~esm2
openSUSE Leap 15.2libmspack0.6-lp152.6.3.1
openSUSE Leap 15.3libmspack0.6-3.11.1
openSUSE Leap 15.6clamav1.4.2-150600.18.6.1
openSUSE Tumbleweedclamav1.4.2-1.1