CVE-2018-14447: High severity libconfuse vulnerability

Published Jul 20, 2018

Updated

trimwhitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.

Affected Software

2 affected components

Libconfuse Project Libconfuse=3.2.1

Debian Debian Linux=8.0

Remediation

Patch Available

https://github.com/martinh/libconfuse/issues/109

Event History

Jul 20, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-14447.

What is the severity of CVE-2018-14447?

The severity of CVE-2018-14447 is high with a CVSS score of 8.8.

What is the affected software for CVE-2018-14447?

The affected software for CVE-2018-14447 is libConfuse version 3.2.1 and Debian Linux version 8.0.

How can I fix CVE-2018-14447?

To fix CVE-2018-14447, it is recommended to upgrade to a patched version of libConfuse or apply the necessary security updates for Debian Linux.

Where can I find more information about CVE-2018-14447?

More information about CVE-2018-14447 can be found on the following references: [http://hac425.unaux.com/index.php/archives/64/](http://hac425.unaux.com/index.php/archives/64/), [https://github.com/martinh/libconfuse/issues/109](https://github.com/martinh/libconfuse/issues/109), [https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html](https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html).