CVE-2019-3817: Use After Free
A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.
Other sources
There is a use-after-free in libcomps library in compsobjmradix.c:compsobjmrtreeunite() function. When two ObjMRTrees are merged, pair variable may be freed and accessed again at the next iteration. An attacker who is able to craft a malicious comps XML file may use this flaw to crash the application or potentially execute code.
Upstream issue: https://github.com/rpm-software-management/libcomps/issues/41
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-3817?
CVE-2019-3817 is a use-after-free vulnerability in libcomps before version 0.1.10.
How does CVE-2019-3817 affect systems?
CVE-2019-3817 allows an attacker to crash an application or execute malicious code by manipulating a crafted comps XML file.
What is the severity of CVE-2019-3817?
CVE-2019-3817 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2019-3817?
Versions of libcomps before 0.1.10 are affected by CVE-2019-3817.
How can I fix CVE-2019-3817?
To fix CVE-2019-3817, update libcomps to version 0.1.10 or higher.