In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block…
Priority LOW 34CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Why it matters now
EPSS 0.02662 85th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:* | before 1.8 | Vulnerable | Cabextract Project |
| cpe:2.3:a:libmspack_project:libmspack:0.3:alpha:*:*:*:*:*:* | 0.3 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:a:libmspack_project:libmspack:0.4:alpha:*:*:*:*:*:* | 0.4 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:* | 0.5 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:a:libmspack_project:libmspack:0.6:alpha:*:*:*:*:*:* | 0.6 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:a:libmspack_project:libmspack:0.7:alpha:*:*:*:*:*:* | 0.7 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:a:libmspack_project:libmspack:0.7.1:alpha:*:*:*:*:*:* | 0.7.1 alpha | Vulnerable | Libmspack Project |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* | 12.04 | Vulnerable | Canonical |
- cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:* Versions before 1.8 Vulnerable ·Cabextract Project
- cpe:2.3:a:libmspack_project:libmspack:0.3:alpha:*:*:*:*:*:* Versions 0.3 alpha Vulnerable ·Libmspack Project
- cpe:2.3:a:libmspack_project:libmspack:0.4:alpha:*:*:*:*:*:* Versions 0.4 alpha Vulnerable ·Libmspack Project
- cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:* Versions 0.5 alpha Vulnerable ·Libmspack Project
- cpe:2.3:a:libmspack_project:libmspack:0.6:alpha:*:*:*:*:*:* Versions 0.6 alpha Vulnerable ·Libmspack Project
- cpe:2.3:a:libmspack_project:libmspack:0.7:alpha:*:*:*:*:*:* Versions 0.7 alpha Vulnerable ·Libmspack Project
- cpe:2.3:a:libmspack_project:libmspack:0.7.1:alpha:*:*:*:*:*:* Versions 0.7.1 alpha Vulnerable ·Libmspack Project
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* | 18.10 | Vulnerable | Canonical |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:ga:*:*:ltss:*:*:* | 12 ga | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:* | 12 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:* | 12 sp2 | Vulnerable | SUSE |
| cpe:2.3:a:starwindsoftware:starwind_virtual_san:-:*:*:*:*:vsphere:*:* | not specified by NVD | Vulnerable | Starwindsoftware |
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Versions 18.10 Vulnerable ·Canonical
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:ga:*:*:ltss:*:*:* Versions 12 ga Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:* Versions 12 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:* Versions 12 sp2 Vulnerable ·SUSE
- cpe:2.3:a:starwindsoftware:starwind_virtual_san:-:*:*:*:*:vsphere:*:* Versions not specified by NVD Vulnerable ·Starwindsoftware
Remediation
Red Hat 1 advisory
- RHSA-2019:2049 Released 2019-08-06 · Red Hat rating Moderatelibmspack security update
- Red Hat Enterprise Linux Client (v. 7) libmspack-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libmspack-devel-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libmspack-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libmspack-devel-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux Server (v. 7) libmspack-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux Server Optional (v. 7) libmspack-0.5-0.7.alpha.el7, libmspack-devel-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux Workstation (v. 7) libmspack-0.5-0.7.alpha.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libmspack-devel-0.5-0.7.alpha.el7
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2019:2049 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2019:2049 |
Not affected: 1 product
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2018-18584
- 2026-10-03 Alias added: GHSA-gp3p-9jm9-wrjc
References
Advisory 10
- https://bugs.debian.org/911640
- https://www.cabextract.org.uk/#changes
- USN-3814-3
- USN-3814-1
- USN-3814-2
- https://www.openwall.com/lists/oss-security/2018/10/22/1
- [debian-lts-announce] 20181026 [SECURITY] [DLA 1555-1] libmspack security update
- GLSA-201903-20
- RHSA-2019:2049
- https://www.starwindsoftware.com/security/sw-20181213-0001/
Sources
- CVE-2018-18584 · CVE Program
- CVE-2018-18584 · NVD
- FIRST EPSS
- GHSA-gp3p-9jm9-wrjc · GitHub Advisory Database · CC BY 4.0
- CVE-2018-18584 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences