CVE-2019-8379: Null Pointer Dereference
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8379?
The severity of CVE-2019-8379 is high with a CVSS score of 7.8.
How can CVE-2019-8379 be triggered?
CVE-2019-8379 can be triggered by sending a crafted file to a binary.
What is the impact of CVE-2019-8379?
The impact of CVE-2019-8379 is a Denial of Service (Segmentation fault) or possibly unspecified other impact.
Which software versions are affected by CVE-2019-8379?
AdvanceCOMP version up to 2.1, Debian Linux 9.0, Fedora 35, Red Hat Enterprise Linux versions 7.0 are affected by CVE-2019-8379.
Are there any known fixes for CVE-2019-8379?
Yes, please refer to the references for the official fixes and updates for CVE-2019-8379.