CVE-2018-19208: Null Pointer Dereference
First published: Mon Nov 12 2018(Updated: )
In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libwpd Project Libwpd | =0.10.2 | |
| Redhat Enterprise Linux | =7.0 | |
| SUSE SUSE Linux Enterprise Server | =11-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1643752
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19208
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1649415
- https://access.redhat.com/support/policy/updates/errata/
- https://access.redhat.com/errata/RHSA-2019:2126
- https://access.redhat.com/security/cve/cve-2018-19208
- https://bugzilla.redhat.com/show_bug.cgi?id=1649414
- https://bugzilla.redhat.com/show_bug.cgi?id=1643752
Frequently Asked Questions
What is CVE-2018-19208?
CVE-2018-19208 is a vulnerability in libwpd 0.10.2 that allows for a denial of service attack due to a NULL pointer dereference in the WP6ContentListener::defineTable function.
How severe is CVE-2018-19208?
CVE-2018-19208 has a severity rating of 6.5 out of 10.
What software versions are affected by CVE-2018-19208?
The affected software versions are libwpd 0.10.2, Redhat Enterprise Linux 7.0, and Suse Linux Enterprise Server 11-sp4.
How can I fix CVE-2018-19208?
To fix CVE-2018-19208, you should update to a version of libwpd that is not affected by the vulnerability.
Where can I find more information about CVE-2018-19208?
You can find more information about CVE-2018-19208 at the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1643752), [Reference 2](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19208), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1649415).
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-19208
- agent/type
- agent/tags
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/libwpd project
- canonical/libwpd project libwpd
- version/libwpd project libwpd/0.10.2
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- vendor/suse
- canonical/suse suse linux enterprise server
- version/suse suse linux enterprise server/11-sp4