Stack-based buffer overflow in libmspack - CVE-2018-14682

Vulnerability identifier: #VU14160

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14682

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to stack-based buffer overflow in the tolower macro, as defined in the mspack/chmd.c source code file. A local attacker can send a specially crafted request that submits malicious input, trigger memory corruption and cause the service to crash.

libmspack
Gentoo Linux
Amazon Linux AMI
Debian Linux
SUSE MicroOS
Fedora
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
Opensuse
SUSE Linux Enterprise Module for Basesystem
libmspack (Alpine package)
clamav (Alpine package)
libmspack-debugsource
libmspack-devel
libmspack0
libmspack0-debuginfo
libmspack
clamav
cabextract
ClamAV

Update to version 0.7.

libmspack - update to 0.7
libmspack (Alpine package) - update to 0.7.1_alpha-r0
clamav (Alpine package) - update to 0.100.2-r0
libmspack-debugsource - addressed in versions 0.4-15.10.1, 0.6-3.11.1
libmspack-devel - addressed in versions 0.4-15.10.1, 0.6-3.11.1
libmspack0 - addressed in versions 0.4-15.10.1, 0.6-3.11.1
libmspack0-debuginfo - addressed in versions 0.4-15.10.1, 0.6-3.11.1
libmspack - addressed in versions 0.7-0.1.alpha.el7, 0.9.1-0.1.alpha.fc27, 0.9.1-0.1.alpha.fc28, 0.9.1-0.1.alpha.fc29
clamav - addressed in versions 0.100.2-1.el6, 0.100.2-2.el7, 0.100.2-2.fc27, 0.100.2-2.fc28, 0.100.2-2.fc29
cabextract - addressed in versions 1.9-1.fc27, 1.9-1.fc28, 1.9-1.fc29

• https://github.com/kyz/libmspack/commit/4fd9ccaa54e1aebde1e4b95fb0163b699fd7bcc8

• Multiple vulnerabilities in libmspack
• Debian update for libmspack
• Multiple vulnerabilities in Clam AntiVirus
• OpenSUSE Linux update for clamav
• OpenSUSE Linux update for clamav
• Amazon Linux AMI update for clamav
• Red Hat update for libmspack
• Stack-based buffer overflow in clamav (Alpine package)
• Stack-based buffer overflow in libmspack (Alpine package)
• Gentoo update for cabextract, libmspack
• SUSE update for libmspack
• SUSE update for libmspack
• Fedora EPEL 7 update for libmspack
• Fedora 29 update for clamav
• Fedora 28 update for clamav
• Fedora 27 update for clamav
• Fedora EPEL 7 update for clamav
• Fedora EPEL 6 update for clamav
• Fedora 29 update for cabextract, libmspack
• Fedora 28 update for cabextract, libmspack
• Fedora 27 update for cabextract, libmspack