Red Hat Security Advisory

RHSA-2019:3898

libcomps security update

Released 2019-11-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras libcomps-0.1.8-13.el7, libcomps-devel-0.1.8-13.el7, libcomps-doc-0.1.8-13.el7 +2

TI-2019-02829 CVE-2019-3817 · GHSA-3rh7-494q-3mjq

MEDIUM 41

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01721 Published 2019-03-27 Fixed CWE-416