Advisories » MGASA-2018-0231

Updated afflib packages fix security vulnerability

Publication date: 12 May 2018
Modification date: 12 May 2018
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2018-8050

Description

A flaw was found in AFFLIB (aka AFFLIBv3) through 3.7.16. The af_get_page()
function in lib/afflib_pages.cpp allows remote attackers to cause a denial of
service (segmentation fault) via a corrupt AFF image that triggers an
unexpected pagesize value (CVE-2018-8050).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22852
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/EK7SAU67TREHY4JCD4MLYAIXRYF3BAX5/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8050

SRPMS

6/core

• afflib-3.7.10-1.1.mga6

5/core

• afflib-3.7.4-4.1.mga5