A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libgcab1Upgrade libgcab1-develUpgrade gcabUpgrade gcab-debuginfo | Mar 1, 2018 | Jan 11, 2018 |
| Debian | — | Upgrade gcab | Jan 26, 2018 | Jan 11, 2018 |
| Freebsd | — | Upgrade gcab | Jan 27, 2018 | Jan 27, 2018 |
| Oracle_linux | — | Upgrade gcabUpgrade libgcab1Upgrade libgcab1-devel | Feb 27, 2018 | Dec 19, 2017 |
| Redhat_linux | — | Upgrade libgcab1Upgrade libgcab1-develUpgrade gcab-debuginfoUpgrade gcab | Feb 27, 2018 | Jan 11, 2018 |
| Suse | — | Upgrade gcab-langUpgrade gcab-develUpgrade gcabUpgrade libgcab-1_0-0Upgrade typelib-1_0-GCab-1_0 | May 20, 2018 | Jan 11, 2018 |
| Ubuntu | — | Upgrade gcabUpgrade libgcab-1.0-0 | Jan 25, 2018 | Jan 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub