Denial of Service Vulnerability in libansilove Affected by Remote File Input
CVE-2018-19353

6.5MEDIUM

Key Information:

Vendor

Ansilove

Status
Libansilove
Vendor
CVE Published:
18 November 2018

What is CVE-2018-19353?

The ansilove_ansi function within the loaders/ansi.c file of libansilove version 1.0.0 is susceptible to a denial of service condition. By utilizing a carefully crafted file, a remote attacker can trigger an out-of-bounds read, leading to application crashes and potential disruption of service. This vulnerability poses a threat to the stability and availability of systems utilizing this library.

References

https://github.com/ansilove/libansilove/issues/4
x_refsource_MISC
https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-l...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.