A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-gcabcentos-upgrade-gcab-debuginfocentos-upgrade-libgcab1centos-upgrade-libgcab1-devel | Mar 1, 2018 | Jan 11, 2018 |
| Debian | debian-upgrade-gcab | Jan 26, 2018 | Jan 11, 2018 | |
| Freebsd | freebsd-upgrade-package-gcab | Jan 27, 2018 | Jan 27, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-gcaboracle-linux-upgrade-libgcab1oracle-linux-upgrade-libgcab1-devel | Feb 27, 2018 | Dec 19, 2017 |
| Redhat_linux | — | redhat-upgrade-gcabredhat-upgrade-gcab-debuginforedhat-upgrade-libgcab1redhat-upgrade-libgcab1-devel | Feb 27, 2018 | Jan 11, 2018 |
| Suse | — | suse-upgrade-gcabsuse-upgrade-gcab-develsuse-upgrade-gcab-langsuse-upgrade-libgcab-1_0-0suse-upgrade-typelib-1_0-gcab-1_0 | May 20, 2018 | Jan 11, 2018 |
| Ubuntu | ubuntu-upgrade-gcabubuntu-upgrade-libgcab-1-0-0 | Jan 25, 2018 | Jan 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub