USN-3814-1: libmspack vulnerabilities
It was discovered libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service. (CVE-2018-18584, CVE-2018-18585)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libmspack0to a version that resolves this vulnerability.Fixed in 0.7-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libmspack0to a version that resolves this vulnerability.Fixed in 0.6-3ubuntu0.2 - Upgrade
Upgrade
ubuntu/libmspack0to a version that resolves this vulnerability.Fixed in 0.5-1ubuntu0.16.04.3
Event History
Frequently Asked Questions
What is the vulnerability ID for libmspack?
The vulnerability ID for libmspack is CVE-2018-18584 and CVE-2018-18585.
What is the impact of the libmspack vulnerabilities?
The libmspack vulnerabilities could cause the application to crash, resulting in a denial of service.
Which versions of libmspack are affected?
Versions 0.7-1ubuntu0.1, 0.6-3ubuntu0.2, and 0.5-1ubuntu0.16.04.3 of libmspack are affected.
How can I fix the libmspack vulnerabilities on Ubuntu 18.10?
To fix the libmspack vulnerabilities on Ubuntu 18.10, update the libmspack0 package to version 0.7-1ubuntu0.1.
Where can I find more information about the libmspack vulnerabilities?
You can find more information about the libmspack vulnerabilities at the following references: CVE-2018-18584, CVE-2018-18585, and USN-3814-2.