Buffer Overflow

2019-07-1601:22:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

48.7%

JSON

libmspack is vulnerable to buffer overflow. The function chmd_read_headers in ibmspack/mspack/chmd.c does not handle the CHM file name properly, allowing an attacker to read past the allocated buffer if a malicious file starting with :: and length shorter than 33 bytes is provided.

CPENameOperatorVersion
libmspackeq0.1.0
libmspack.soeq0.1.0
libmspackeq0.5__0.6.alpha.el7
libmspackeq0.5__0.0.6.alpha.el7
libmspackeq0.7__0.1.alpha.el8.3
libmspackeq0.5__0.0.7.alpha.el7
libmspackeq0.5__0.7.alpha.el7
libmspack:3.10eq0.8_alpha-r0
libmspack:edgeeq0.8_alpha-r1
libmspackeq0.1.0

Name	Operator	Version
libmspack	eq	0.1.0
libmspack.so	eq	0.1.0
libmspack	eq	0.5__0.6.alpha.el7
libmspack	eq	0.5__0.0.6.alpha.el7
libmspack	eq	0.7__0.1.alpha.el8.3
libmspack	eq	0.5__0.0.7.alpha.el7
libmspack	eq	0.5__0.7.alpha.el7
libmspack:3.10	eq	0.8_alpha-r0
libmspack:edge	eq	0.8_alpha-r1
libmspack	eq	0.1.0