CVE-2018-5251: Medium severity libming vulnerability
Published Jan 5, 2018
·Updated
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.
Affected Software
2 affected components
Libming Libming=0.4.8
Debian Debian Linux=7.0
Event History
Jan 5, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-5251?
CVE-2018-5251 has a medium severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2018-5251?
To fix CVE-2018-5251, upgrade to a patched version of libming that resolves the integer signedness error.
3
Which versions of libming are affected by CVE-2018-5251?
CVE-2018-5251 specifically affects version 0.4.8 of libming.
4
Can CVE-2018-5251 be exploited remotely?
Yes, remote attackers can exploit CVE-2018-5251 by sending a crafted SWF file to the vulnerable system.
5
Is CVE-2018-5251 specific to any operating system?
CVE-2018-5251 is relevant for decisions regarding libming on Debian GNU/Linux version 7.0 and any system using the affected libming version.