Fluid Attacks Database

Description

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
alpine v3.6	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0
alpine v3.10	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0
debian 14	libmspack	>=0 <0.8-1	0.8-1
alpine v3.8	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0
debian 13	libmspack	>=0 <0.8-1	0.8-1
alpine v3.11	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0
alpine v3.9	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0
debian 11	libmspack	>=0 <0.8-1	0.8-1
debian 12	libmspack	>=0 <0.8-1	0.8-1
alpine v3.7	libmspack	=0.5_alpha-r1 \|\| =0.7.1_alpha-r0 \|\| >=0 <0.8_alpha-r0	0.8_alpha-r0

1-10 of 11

Aliases

1. CVE-2018-185852. NVD-2018-185853. OSV-ALPINE-2018-185854. OSV-2018-185855. OSV-DEBIAN-2018-185856. SECURITY-CVE-2018-185857. SECURITY-TRACKER-CVE-2018-18585

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.