Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2018-5345 Details
Description
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2018:0350 | CVE | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1527296 | CVE | Issue TrackingThird Party AdvisoryVDB Entry |
| https://usn.ubuntu.com/3546-1/ | CVE | Third Party Advisory |
| https://www.debian.org/security/2018/dsa-4095 | CVE | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:0350 | [email protected] | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1527296 | [email protected] | Issue TrackingThird Party AdvisoryVDB Entry |
| https://usn.ubuntu.com/3546-1/ | [email protected] | Third Party Advisory |
| https://www.debian.org/security/2018/dsa-4095 | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| fedoraproject fedora | All versions |
CPE
Remediation
| |
| gnome gcab | <= 0.7.4 |
CPE
Remediation
| |
| canonical ubuntu linux | 16.04 17.10 |
CPE
Remediation
| |
| debian debian linux | 9.0 |
CPE
Remediation
| |
| redhat enterprise linux desktop | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server aus | 7.4 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server eus | 7.4 7.5 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server tus | 7.4 7.6 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 7.0 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 24, 2020 | CWE Remap | [email protected] |
| Mar 6, 2019 | Modified Analysis | [email protected] |
| Mar 19, 2018 | CVE Modified | [email protected] |
| Feb 28, 2018 | CVE Modified | [email protected] |
| Jan 26, 2018 | CVE Modified | [email protected] |
| Jan 24, 2018 | Initial Analysis | [email protected] |