CVE-2019-1010305 Memory corruption in libmspack

Medium 5.5 Published 15 Jul 2019 Updated 5 Aug 2024

A buffer overflow in libmspack allows information disclosure when a user opens a specially crafted CHM file.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2019-1010305?

CVE-2019-1010305 is a medium-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 15 Jul 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.

Weakness: CWE-119

Which versions are affected by CVE-2019-1010305?

It affects 4 products.

Linux distribution packages (24)

`libmspack` AlmaLinux:8	All versions	`0.7-0.3.alpha.el8.4`
`libmspack-devel` AlmaLinux:8	All versions	`0.7-0.3.alpha.el8.4`
`libmspack` Red Hat:enterprise_linux:7::client	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-devel` Red Hat:enterprise_linux:7::client	All versions	`0:0.5-0.8.alpha.el7`
`libmspack` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-devel` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.5-0.8.alpha.el7`
`libmspack` Red Hat:enterprise_linux:7::server	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-devel` Red Hat:enterprise_linux:7::server	All versions	`0:0.5-0.8.alpha.el7`
`libmspack` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.5-0.8.alpha.el7`
`libmspack-devel` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.5-0.8.alpha.el7`
`libmspack` Red Hat:enterprise_linux:8::appstream	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack-debugsource` Red Hat:enterprise_linux:8::appstream	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack` Red Hat:enterprise_linux:8::crb	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack-debuginfo` Red Hat:enterprise_linux:8::crb	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack-debugsource` Red Hat:enterprise_linux:8::crb	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack-devel` Red Hat:enterprise_linux:8::crb	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack` Rocky Linux:8	All versions	`0:0.7-0.3.alpha.el8.4`
`libmspack` SUSE:Linux Enterprise Module for Basesystem 15 SP1	All versions	`0.6-3.8.19`
`libmspack` openSUSE:Leap 15.1	All versions	`0.6-lp151.4.3.1`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Kyzer Libmspack.

How do I fix CVE-2019-1010305?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-1010305 being exploited?

There is no known exploitation of CVE-2019-1010305 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2019-1010305, ALSA-2020:1686, DEBIAN-CVE-2019-1010305, DLA-1895-1, DLA-2805-1, GHSA-w7hv-jwj8-qh4r and 9 more.