CVE-2018-17141: debian debian_linux Out-of-bounds Write

Vulnerability summary

CVE-2018-17141 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 5.59% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 21-09-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
• CWE-824Access of Uninitialized PointerThe product accesses or uses a pointer that has not been initialized.