CVE - CVE-2019-3817

CVE-ID
CVE-2019-3817	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3817 CONFIRM:https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046 CONFIRM:https://github.com/rpm-software-management/libcomps/issues/41 REDHAT:RHSA-2019:3583 URL:https://access.redhat.com/errata/RHSA-2019:3583 REDHAT:RHSA-2019:3898 URL:https://access.redhat.com/errata/RHSA-2019:3898
Assigning CNA
Red Hat, Inc.
Date Record Created
20190103	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20190103)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)