CVE-2018-15161

Published September 1st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments

libyal/libesedb

Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.

GitHub

372