Oval Definition:oval:com.ubuntu.cosmic:def:201495560000000
Revision Date:2015-02-03Version:1
Title:CVE-2014-9556 on Ubuntu 18.10 (cosmic) - medium.
Description:Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop. It was discovered that cabextract incorrectly handled certain malformed CAB files. An attacker could use this issue to cause cabextract to hang, resulting in a denial of service.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-9556
Platform(s):Ubuntu 18.10
Product(s):
Definition Synopsis
  • Ubuntu 18.10 (cosmic) is installed.
  • AND Package Information
  • cabextract package in cosmic, is related to the CVE in some way and has been fixed (note: '1.6-1.1').
  • OR libmspack package in cosmic, is related to the CVE in some way and has been fixed (note: '0.4-3').
  • BACK