Security Advisory

CVE-2018-8754

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-03-18 03:00:00
Last updated 2024-08-05 07:02:26
Assigner mitre
State PUBLISHED

Description

The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub