Red Hat Security Advisory

RHSA-2018:3327

libmspack security update

Released 2018-10-30 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libmspack-0.5-0.6.alpha.el7
Red Hat Enterprise Linux Client Optional (v. 7) libmspack-devel-0.5-0.6.alpha.el7
Red Hat Enterprise Linux ComputeNode (v. 7) libmspack-0.5-0.6.alpha.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libmspack-devel-0.5-0.6.alpha.el7
Red Hat Enterprise Linux Server (v. 7) libmspack-0.5-0.6.alpha.el7
Red Hat Enterprise Linux Server Optional (v. 7) libmspack-0.5-0.6.alpha.el7, libmspack-devel-0.5-0.6.alpha.el7
Red Hat Enterprise Linux Workstation (v. 7) libmspack-0.5-0.6.alpha.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) libmspack-devel-0.5-0.6.alpha.el7
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libmspack-0.5-0.6.alpha.el7, libmspack-devel-0.5-0.6.alpha.el7

TI-2018-10539 CVE-2018-14681 · GHSA-px34-hh2g-j67r

MEDIUM 45

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03757 Published 2018-07-28 Fixed CWE-787

TI-2018-10540 CVE-2018-14682 · GHSA-cx83-c67h-h9gr

MEDIUM 44

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0361 Published 2018-07-28 Fixed CWE-193

TI-2018-10538 CVE-2018-14680 · GHSA-qfhv-j4j2-7h5x

LOW 35

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.03705 Published 2018-07-28 Fixed CWE-20

TI-2018-10537 CVE-2018-14679 · GHSA-jrp9-m5qh-vr83

LOW 35

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0327 Published 2018-07-28 Fixed CWE-193