CVE-2018-1000041 Information disclosure in n/a
An attacker can leak Windows username and NTLM password hashes by tricking a user into opening a specially crafted SVG file with an UNC path.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-1000041?
CVE-2018-1000041 is a high-severity vulnerability in Debian Debian Linux, published on 9 Feb 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.
Which versions are affected by CVE-2018-1000041?
It affects 2 products.
Linux distribution packages (4)
librsvg SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 2.40.20-5.6.1 |
librsvg SUSE:Linux Enterprise Server 12 SP3 | All versions | 2.40.20-5.6.1 |
librsvg SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 2.40.20-5.6.1 |
librsvg SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 2.40.20-5.6.1 |
Products include Debian Debian Linux, Gnome Librsvg.
How do I fix CVE-2018-1000041?
Apply the vendor's patch.
Is CVE-2018-1000041 being exploited?
There is no known exploitation of CVE-2018-1000041 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DLA-1278-1, GHSA-8xg7-956h-4q23, MGASA-2018-0291, MGASA-2018-0297, SUSE-SU-2018:1288-1.