CVE-2018-5345
Fixed in a distro release EPSS 2%
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
Products: fedoraproject fedora, gnome gcab, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gcab | 0.7-7 |
| Debian 13 | gcab | 0.7-7 |
| Debian 14 | gcab | 0.7-7 |
| Debian 9 | gcab | 0.7-2+deb9u1 |
| Red Hat Enterprise Linux 7 | gcab | 0:0.7-4.el7_4 |
| Red Hat Enterprise Linux 7 | gcab-debuginfo | 0:0.7-4.el7_4 |
| Red Hat Enterprise Linux 7 | libgcab1 | 0:0.7-4.el7_4 |
| Red Hat Enterprise Linux 7 | libgcab1-devel | 0:0.7-4.el7_4 |
| Ubuntu 16.04 LTS | gcab | 0.7-1ubuntu0.1 |
| openSUSE Tumbleweed | gcab | 1.4-2.9 |