CVE-2018-8754

MEDIUM 5.5CVE-2018-8754 · Published 18/03/2018 · updated 17/06/2026

In short

CVE-2018-8754 is a MEDIUM (CVSS 5.5) vulnerability affecting libevt (libevt project).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.8% of all vulnerabilities.
Fix: update to 20180317 or later.

Package	Affected versions	Patched versions
libevt libevt_project	`< 20180317`	`20180317`

Description

The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub

References

libyal/libevt commit 9d2cc3c · Patch
debian.org/security/2018/dsa-4160 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free