Affected: CleanStart: cabextract

Security vulnerability affects the cabextract package. In mspack/cab.

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

libmspack-devel-0.11-2.1 on GA media

Security update for libmspack

Affected: Ubuntu:14.04:LTS: clamav, Ubuntu:Pro:14.04:LTS: cabextract, Ubuntu:Pro:14.04:LTS: libmspack, Ubuntu:16.04:LTS: libmspack, Ubuntu:18.04:LTS: libmspack

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.