CVE-2018-16982 Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
Attackers can cause a denial of service via segmentation fault in OpenCC by providing a crafted .ocd file with out-of-bounds offsets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-16982?
CVE-2018-16982 is a medium-severity denial of service vulnerability in n/a, published on 13 Sep 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
Weakness: CWE-125
Which versions are affected by CVE-2018-16982?
2 open source packages ship an affected version, including opencc. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
opencc npm | All versions | 1.1.2 |
opencc npm | All versions | 1.1.2 |
Linux distribution packages (6)
opencc SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 | All versions | 1.0.5-150000.5.3.1 |
opencc SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | All versions | 1.0.5-150000.5.3.1 |
opencc SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.0.3-5.3.1 |
opencc SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.0.3-5.3.1 |
opencc SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 1.0.3-5.3.1 |
opencc openSUSE:Leap 15.5 | All versions | 1.0.5-150000.5.3.1 |
Products include Byvoid Open Chinese Convert.
How do I fix CVE-2018-16982?
Upgrade opencc to 1.1.2 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-16982 being exploited?
There is no known exploitation of CVE-2018-16982 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-9qh2-6fxg-9m4g, MGASA-2018-0443, SUSE-SU-2022:4288-1, SUSE-SU-2024:2102-1, UBUNTU-CVE-2018-16982.