[3.9] cabextract: Buffer overflow (CVE-2018-18584)
cabextract before 1.8, the CAB block input buffer is one byte too small
for the maximal Quantum block,
leading to an out-of-bounds write.
Fixed In Version:
cabextract 1.8
References:
https://www.cabextract.org.uk
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584
https://www.openwall.com/lists/oss-security/2018/10/22/1
(from redmine: issue id 9668, created on 2018-11-21, closed on 2018-11-28)
- Relations:
- parent #9667 (closed)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information