readstat vulnerabilities and fixes

Recent CVEs affecting readstat, with upgrade or downgrade steps. 3 tracked.

readstat has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-05-22. Highest priority: CVE-2018-11365 (score 53/100).

• CVE-2018-5698 HIGH 7.8 DOWNGRADE libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string.
• CVE-2018-11365 HIGH 7.5 DOWNGRADE sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop.
• CVE-2018-11364 HIGH 7.5 DOWNGRADE sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a mem

FAQ

How do I fix readstat vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is readstat being exploited right now?

None of the tracked readstat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which readstat CVE should I patch first?

CVE-2018-11365 currently ranks highest (53/100): sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop..

RSS feed for readstat · ← Back to latest CVEs