1. CVE-Search
  2. CVE-2018-19208
ID CVE-2018-19208
Summary In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
References
Vulnerable Configurations
  • cpe:2.3:a:libwpd_project:libwpd:0.10.2:*:*:*:*:*:*:*
    cpe:2.3:a:libwpd_project:libwpd:0.10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 14-04-2020 - 15:27)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
redhat via4
advisories
bugzilla
id 1649414
title CVE-2018-19208 libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 7 is installed
      oval oval:com.redhat.rhba:tst:20150364027
    • OR
      • AND
        • comment libwpd is earlier than 0:0.10.0-2.el7
          oval oval:com.redhat.rhsa:tst:20192126001
        • comment libwpd is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20152197002
      • AND
        • comment libwpd-devel is earlier than 0:0.10.0-2.el7
          oval oval:com.redhat.rhsa:tst:20192126003
        • comment libwpd-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20152197004
      • AND
        • comment libwpd-doc is earlier than 0:0.10.0-2.el7
          oval oval:com.redhat.rhsa:tst:20192126005
        • comment libwpd-doc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20152197006
      • AND
        • comment libwpd-tools is earlier than 0:0.10.0-2.el7
          oval oval:com.redhat.rhsa:tst:20192126007
        • comment libwpd-tools is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20152197008
rhsa
id RHSA-2019:2126
released 2019-08-06
severity Low
title RHSA-2019:2126: libwpd security update (Low)
rpms
  • libwpd-0:0.10.0-2.el7
  • libwpd-debuginfo-0:0.10.0-2.el7
  • libwpd-devel-0:0.10.0-2.el7
  • libwpd-doc-0:0.10.0-2.el7
  • libwpd-tools-0:0.10.0-2.el7
refmap via4
misc https://bugzilla.redhat.com/show_bug.cgi?id=1643752
Last major update 14-04-2020 - 15:27
Published 12-11-2018 - 19:29
Last modified 14-04-2020 - 15:27
Back to Top