CVE-2018-7554 There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sam2p project sam2p | = 0.49.4 | No fix listed |
| debian linux | = 7.0 | No fix listed |
References
- bugs.debian.org issue-tracking third-party-advisory
- github.com exploit third-party-advisory
- [debian-lts-announce] 20180406 [SECURITY] [DLA 1340-1] sam2p security update mailing-list third-party-advisory