Red Hat Security AdvisoryRHSA-2019:2126
libwpd security update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libwpd-0.10.0-2.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libwpd-devel-0.10.0-2.el7, libwpd-doc-0.10.0-2.el7, libwpd-tools-0.10.0-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwpd-0.10.0-2.el7, libwpd-devel-0.10.0-2.el7, libwpd-doc-0.10.0-2.el7 +1
- Red Hat Enterprise Linux Server (v. 7) libwpd-0.10.0-2.el7
- Red Hat Enterprise Linux Server Optional (v. 7) libwpd-0.10.0-2.el7, libwpd-0.10.0-2.el7.ppc, libwpd-devel-0.10.0-2.el7 +3
- Red Hat Enterprise Linux Workstation (v. 7) libwpd-0.10.0-2.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libwpd-devel-0.10.0-2.el7, libwpd-doc-0.10.0-2.el7, libwpd-tools-0.10.0-2.el7
Fixes 1 record
Priority LOW 32
In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01488 · Published 2018-11-12 · Partial fix CWE-476
