CVE-2018-8050

The afgetpage() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.

References

https://github.com/sshock/AFFLIBv3/commit/435a2ca802358a3debb6d164d2c33049131df81c

Affected packages

Git / github.com/sshock/afflibv3

Affected ranges

Type: GIT
Repo: https://github.com/sshock/afflibv3
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

435a2ca802358a3debb6d164d2c33049131df81c

Affected versions

3.*

3.7.1

3.7.2

v3.*

v3.7.10

v3.7.11

v3.7.12

v3.7.13

v3.7.14

v3.7.15

v3.7.16

v3.7.3

v3.7.4

v3.7.5

v3.7.6

v3.7.7

v3.7.8

v3.7.9

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "97577065404003686757067143204020732506",
            "length": 3756.0
        },
        "source": "https://github.com/sshock/afflibv3/commit/435a2ca802358a3debb6d164d2c33049131df81c",
        "id": "CVE-2018-8050-378bfd24",
        "signature_version": "v1",
        "target": {
            "file": "lib/afflib_pages.cpp",
            "function": "af_get_page"
        },
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "272964851105127642200058026143803066100",
                "106991726861691507362717612320841901943",
                "84290451292210324762881947554174703910"
            ]
        },
        "source": "https://github.com/sshock/afflibv3/commit/435a2ca802358a3debb6d164d2c33049131df81c",
        "id": "CVE-2018-8050-e4f4a524",
        "signature_version": "v1",
        "target": {
            "file": "lib/afflib_pages.cpp"
        },
        "signature_type": "Line",
        "deprecated": false
    }
]