CVE-2018-8050 The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that trigge...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/afflib(Debian:12) | < 3.7.16-3 | 3.7.16-3 |
| debian/afflib(Debian:13) | < 3.7.16-3 | 3.7.16-3 |
| debian/afflib(Debian:14) | < 3.7.16-3 | 3.7.16-3 |
| afflib project afflib | <= 3.7.16 | No fix listed |
References
- Debian Security Tracker CVE-2018-8050 vendor-advisory
- github.com patch vendor-advisory
- bugs.debian.org issue-tracking