PatchTheCVEkyzer vulnerabilities
Recent CVEs affecting kyzer products. 3 tracked.
kyzer has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-15. Highest priority: CVE-2018-18586 (score 51/100).
- CVE-2019-1010305 MEDIUM 5.5 DOWNGRADE MITIGATE libmspack 0.9.1alpha is affected by: Buffer Overflow
- CVE-2018-18586 MEDIUM 5.3 DOWNGRADE chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect
- CVE-2018-18585 MEDIUM 4.3 DOWNGRADE MITIGATE chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first
FAQ
How do I fix kyzer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kyzer being exploited right now?
None of the tracked kyzer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kyzer CVE should I patch first?
CVE-2018-18586 currently ranks highest (51/100): chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect.