SUSE update for libmspack
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2018-14679 CVE-2018-14681 CVE-2018-14682 |
| CWE-ID | CWE-121 |
| Exploitation vector | Local |
| Public exploit |
Public exploit code for vulnerability #1 is available. Public exploit code for vulnerability #2 is available. Public exploit code for vulnerability #3 is available. |
| Vulnerable software Subscribe |
SUSE MicroOS Operating systems & Components / Operating system SUSE Linux Enterprise Module for Basesystem Operating systems & Components / Operating system libmspack-devel Operating systems & Components / Operating system package or component libmspack0-debuginfo Operating systems & Components / Operating system package or component libmspack0 Operating systems & Components / Operating system package or component libmspack-debugsource Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Stack-based buffer overflow
EUVDB-ID: #VU14162
Risk: Low
CVSSv3.1: 5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2018-14679
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to cause DoS condition on the target system.
The vulnerability exists due to stack-based buffer overflow the read_chunk function, as defined in the mspack/chmd.c source code file. A local attacker can send a specially crafted request that submits malicious input, trigger memory corruption and cause the service to crash.
MitigationUpdate the affected package libmspack to the latest version.
Vulnerable software versionsSUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Basesystem: 15-SP2 - 15-SP3
libmspack-devel: before 0.6-3.11.1
libmspack0-debuginfo: before 0.6-3.11.1
libmspack0: before 0.6-3.11.1
libmspack-debugsource: before 0.6-3.11.1
External linkshttp://www.suse.com/support/update/announcement/2021/suse-su-20212802-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
2) Stack-based buffer overflow
EUVDB-ID: #VU14159
Risk: Low
CVSSv3.1: 7.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2018-14681
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to stack-based buffer overflow in the kwajd_read_headers function, as defined in the mspack/kwajd.c source code file. A local attacker can send a specially crafted request that submits malicious input, trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability may result in system compromise.
MitigationUpdate the affected package libmspack to the latest version.
Vulnerable software versionsSUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Basesystem: 15-SP2 - 15-SP3
libmspack-devel: before 0.6-3.11.1
libmspack0-debuginfo: before 0.6-3.11.1
libmspack0: before 0.6-3.11.1
libmspack-debugsource: before 0.6-3.11.1
External linkshttp://www.suse.com/support/update/announcement/2021/suse-su-20212802-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
3) Stack-based buffer overflow
EUVDB-ID: #VU14160
Risk: Low
CVSSv3.1: 5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2018-14682
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to cause DoS condition on the target system.
The vulnerability exists due to stack-based buffer overflow in the tolower macro, as defined in the mspack/chmd.c source code file. A local attacker can send a specially crafted request that submits malicious input, trigger memory corruption and cause the service to crash.
MitigationUpdate the affected package libmspack to the latest version.
Vulnerable software versionsSUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Basesystem: 15-SP2 - 15-SP3
libmspack-devel: before 0.6-3.11.1
libmspack0-debuginfo: before 0.6-3.11.1
libmspack0: before 0.6-3.11.1
libmspack-debugsource: before 0.6-3.11.1
External linkshttp://www.suse.com/support/update/announcement/2021/suse-su-20212802-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
