CVE-2018-19208

MEDIUM

libwpd 0.10.2 - Denial of Service via NULL Pointer Dereference in WP6ContentListener

Title source: llm

Description

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.

References (2)

Core 2

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://bugzilla.redhat.com/show_bug.cgi?id=1643752

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:2126

Scores

CVSS v3 6.5

EPSS 0.0041

EPSS Percentile 61.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (3)

libwpd_project/libwpd 0.10.2

redhat/enterprise_linux 7.0

suse/suse_linux_enterprise_server 11 sp4

Published Nov 12, 2018

Tracked Since Feb 18, 2026