CVE-2018-7870: Null Pointer Dereference
Published Mar 8, 2018
·Updated
An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Affected Software
2 affected components
Libming Libming=0.4.8
Debian Debian Linux=7.0
Event History
Mar 8, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7870?
CVE-2018-7870 has a moderate severity level due to the potential for denial of service through application crashes.
2
How do I fix CVE-2018-7870?
To fix CVE-2018-7870, update libming to version 0.4.9 or later where the vulnerability is patched.
3
What types of software are affected by CVE-2018-7870?
CVE-2018-7870 affects libming version 0.4.8 and Debian Linux version 7.0.
4
What is the impact of CVE-2018-7870?
The impact of CVE-2018-7870 is a segmentation fault and application crash, leading to a denial of service.
5
Is CVE-2018-7870 exploitable remotely?
CVE-2018-7870 may be exploited remotely if the affected software is exposed to untrusted inputs.