CVE-2019-18218 Memory corruption in n/a
A heap-based buffer overflow in the file library allows attackers to execute arbitrary code or cause denial of service via crafted CDF files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-18218?
CVE-2019-18218 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 21 Oct 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
Weakness: CWE-787
Which versions are affected by CVE-2019-18218?
It affects 6 products.
Linux distribution packages (35)
file AlmaLinux:8 | All versions | 5.33-20.el8 |
file-devel AlmaLinux:8 | All versions | 5.33-20.el8 |
file-libs AlmaLinux:8 | All versions | 5.33-20.el8 |
python3-magic AlmaLinux:8 | All versions | 5.33-20.el8 |
file Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
file-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
file-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
file-libs Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
file-libs-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
python3-magic Red Hat:enterprise_linux:8::baseos | All versions | 0:5.33-20.el8 |
file-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.33-20.el8 |
file-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:5.33-20.el8 |
file-devel Red Hat:enterprise_linux:8::crb | All versions | 0:5.33-20.el8 |
file-libs-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.33-20.el8 |
file Rocky Linux:8 | All versions | 0:5.33-20.el8 |
file SUSE:HPE Helion OpenStack 8 | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 5.32-7.8.1 |
python-magic SUSE:Linux Enterprise Module for Development Tools 15 SP1 | All versions | 5.32-7.8.1 |
python-magic SUSE:Linux Enterprise Module for Python 2 15 SP1 | All versions | 5.32-7.8.1 |
file SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.22-10.21.1 |
file SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.22-10.21.1 |
python-magic SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.22-10.21.1 |
file SUSE:OpenStack Cloud 8 | All versions | 5.22-10.21.1 |
file SUSE:OpenStack Cloud 9 | All versions | 5.22-10.21.1 |
file SUSE:OpenStack Cloud Crowbar 8 | All versions | 5.22-10.21.1 |
file SUSE:OpenStack Cloud Crowbar 9 | All versions | 5.22-10.21.1 |
file openSUSE:Leap 15.1 | All versions | 5.32-lp151.8.3.1 |
python-magic openSUSE:Leap 15.1 | All versions | 5.32-lp151.8.3.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, File Project File, Netapp Active Iq Unified Manager, Opensuse Leap.
How do I fix CVE-2019-18218?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-18218 being exploited?
There is no known exploitation of CVE-2019-18218 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2019-18218, ALSA-2021:4374, CLEANSTART-2023-RS81674, CLSA-2026-1776693102, CLSA-2026-1777683788, DEBIAN-CVE-2019-18218 and 12 more.