{"id":"CVE-2018-8050","aliases":["DEBIAN-CVE-2018-8050","EUVD-2018-19732","GHSA-ww5j-x7v8-wc43","MGASA-2018-0231","UBUNTU-CVE-2018-8050","USN-6518-1"],"status":"published","title":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows...","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01577,"percentile":0.75637,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2018-03-11T06:00:00Z","modified":"2026-10-24T14:03:33Z","fixes":[{"ecosystem":"Debian:12","package":"afflib","fixed_in":["3.7.16-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"afflib","fixed_in":["3.7.16-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"afflib","fixed_in":["3.7.16-3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"afflib","fixed_in":["3.7.4-4.1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"afflib","fixed_in":["3.7.10-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"afflib","fixed_in":["3.7.7-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"afflib","fixed_in":["3.7.16-2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.16-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.16-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.16-3"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-4.1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.10-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-3ubuntu0.1~esm1"}]}],"versions":["3.7.6-5ubuntu1","3.7.7-1ubuntu1","3.7.7-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.16-2ubuntu0.1~esm1"}]}],"versions":["3.7.16-2","3.7.16-2build1","3.7.16-2build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-3ubuntu0.1~esm1"}]}],"versions":["3.7.6-5ubuntu1","3.7.7-1ubuntu1","3.7.7-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"afflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.16-2ubuntu0.1~esm1"}]}],"versions":["3.7.16-2","3.7.16-2build1","3.7.16-2build2"]}],"products":[{"vendor":"afflib_project","product":"afflib"}],"references":[{"url":"https://github.com/sshock/AFFLIBv3/commit/435a2ca802358a3debb6d164d2c33049131df81c","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8050"},{"url":"https://github.com/advisories/GHSA-ww5j-x7v8-wc43"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-8050","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0231.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22852","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/EK7SAU67TREHY4JCD4MLYAIXRYF3BAX5/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-8050","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6518-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8050","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-8050","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:00:00Z","modified":"2024-09-17T04:13:44.95Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19732","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:00:00Z","modified":"2024-09-17T04:13:44Z","updated_at":"2026-11-03T00:28:24.821388Z"}],"ghsa":[{"id":"GHSA-ww5j-x7v8-wc43","title":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows...","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2022-05-14T03:32:02Z","modified":"2023-02-02T05:08:27Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:44.806949Z"}],"nvd":[{"id":"CVE-2018-8050","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:29:00.207Z","modified":"2026-06-17T02:04:10.97Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:24.264003Z"}],"osv":[{"id":"CVE-2018-8050","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:29:00.207Z","modified":"2026-10-24T14:03:33.406442641Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-8050","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:29:00.207Z","modified":"2026-10-23T18:03:48.541375764Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2018-8050","description":"The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.","status":"published","published":"2018-03-11T06:29:00Z","modified":"2026-04-22T11:51:07.591765Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"MGASA-2018-0231","title":"Updated afflib packages fix security vulnerability","description":"A flaw was found in AFFLIB (aka AFFLIBv3) through 3.7.16. The af_get_page()\nfunction in lib/afflib_pages.cpp allows remote attackers to cause a denial of\nservice (segmentation fault) via a corrupt AFF image that triggers an\nunexpected pagesize value (CVE-2018-8050).\n","status":"published","published":"2018-05-12T07:57:59Z","modified":"2026-04-16T06:23:11.583704588Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"USN-6518-1","title":"afflib vulnerability","description":"Luis Rocha discovered that AFFLIB incorrectly handled certain input files.  \nIf a user or automated system were tricked into processing a specially\ncrafted AFF image file, a remote attacker could possibly use this issue \nto cause a denial of service via application crash. (CVE-2018-8050)\n","status":"published","published":"2023-11-28T16:24:17Z","modified":"2026-06-25T13:31:57.295469079Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}