cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
07 Nov 2023, 03:06
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-10-21 05:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-18218
Mitre link : CVE-2019-18218
CVE.ORG link : CVE-2019-18218
JSON object : View
Products Affected
canonical
- ubuntu_linux
file_project
- file
netapp
- active_iq_unified_manager
debian
- debian_linux
fedoraproject
- fedora
opensuse
- leap
CWE
CWE-787
Out-of-bounds Write