CVE-2018-3848
CVE-2018-3848
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
CVSS 8.8 · High · EPSS 3.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nasa cfitsio
- Versions
- NASA CFITSIO 3.42: Affected
No fix published
cfitsio Debian:12
- Affected ranges
- ECOSYSTEM: < 3.430-1
Update to 3.430-1
cfitsio Debian:13
- Affected ranges
- ECOSYSTEM: < 3.430-1
Update to 3.430-1
cfitsio Debian:14
- Affected ranges
- ECOSYSTEM: < 3.430-1
Update to 3.430-1
cfitsio Ubuntu:16.04:LTS
- Versions
- 3.370-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published