chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name). Upstream patch: https://github.com/kyz/libmspack/commit/8759da8db6ec9e866cb8eb143313f397f925bb4f References: https://www.openwall.com/lists/oss-security/2018/10/22/1
Created cabextract tracking bugs for this issue: Affects: epel-all [bug 1644222] Affects: fedora-all [bug 1644221] Created libmspack tracking bugs for this issue: Affects: epel-all [bug 1644219] Affects: fedora-all [bug 1644218]
Statement: This issue affects the versions of libmspack as shipped with Red Hat Enterprise Linux 7.
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:2049 https://access.redhat.com/errata/RHSA-2019:2049
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2018-18585