p PatchFirst

CVE-2018-11723

CVE-2018-11723

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub

CVSS 5.5 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libpff Debian:12

    Affected ranges
    • ECOSYSTEM: < 20180714-1

    Update to 20180714-1

  • libpff Debian:13

    Affected ranges
    • ECOSYSTEM: < 20180714-1

    Update to 20180714-1

  • libpff Debian:14

    Affected ranges
    • ECOSYSTEM: < 20180714-1

    Update to 20180714-1

Original sources

Check your server →