CVE-2018-17141: Critical severity debian linux vulnerability
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17141?
CVE-2018-17141 has been classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2018-17141?
To fix CVE-2018-17141, you should update HylaFAX to version 6.0.7 or newer and HylaFAX+ to version 5.6.1 or newer.
What versions are affected by CVE-2018-17141?
CVE-2018-17141 affects HylaFAX versions 6.0.6 and HylaFAX+ versions 5.6.0, as well as Debian Linux versions 8.0 and 9.0.
What types of attacks are possible with CVE-2018-17141?
CVE-2018-17141 allows remote attackers to execute arbitrary code via a specially crafted fax page.
Is there any additional guidance for CVE-2018-17141?
It's advisable to regularly monitor security advisories and apply updates as they become available to mitigate vulnerabilities like CVE-2018-17141.