CVE-2018-17141
N/A
Published: September 21, 2018 at 05:00 PM UTC
Updated: June 17, 2026 at 01:45 AM UTC
2 products affected across 2 vendorsDebian LinuxHylafax+
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (6)
x_refsource_CONFIRM
Source: [email protected]
http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027beMailing Listx_refsource_MLISTExploitThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2018/09/20/1Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2018/09/msg00026.htmlMailing Listx_refsource_BUGTRAQExploitThird Party Advisory
Source: [email protected]
https://seclists.org/bugtraq/2018/Sep/49Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
https://www.debian.org/security/2018/dsa-4298x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/Quick Info
StatusMODIFIED
CWE
CWE-787CWE-824
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card