Debian/hylafax: critical 9.8
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMDat
Action: Upgrade hylafax to 3:6.0.6-8.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:6.0.6-8.1 | - |
Fixed versions
| 3:6.0.6-8.1 |
Sources
- osv: DEBIAN-CVE-2018-17141#Debian:14/hylafax
- https://security-tracker.debian.org/tracker/CVE-2018-17141
published · modified · JSON