CVE-2018-15158 - The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file

Back Back to CVE browser

MEDIUM

The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file

Published Sep 1, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.46%

Description

The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

https://github.com/libyal/libesedb/issues/43
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/libyal/libesedb/issues/43		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 1, 2018

Updated Aug 5, 2024

Reserved Aug 7, 2018

Link CVE-2018-15158

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-15158

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-15158