cabextract: Buffer overflow (CVE-2018-18584)
cabextract before 1.8, the CAB block input buffer is one byte too small
for the maximal Quantum block,
leading to an out-of-bounds write.
Fixed In Version:
cabextract 1.8
References:
https://www.cabextract.org.uk
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584
https://www.openwall.com/lists/oss-security/2018/10/22/1
(from redmine: issue id 9667, created on 2018-11-21, closed on 2018-11-28)
- Relations:
- child #9668 (closed)
- child #9669 (closed)
- child #9670 (closed)
- child #9671 (closed)