CVE-2018-8754

Name of the Vulnerable Software and Affected Versions libevt versions prior to 2018-03-17

Description The issue concerns the libevt record values read event() function in libevt record values.c, which does not properly check for out-of-bounds values of user SID data size, strings size, or data size. The vendor has disputed this issue, as described in libyal/libevt issue 5 on GitHub.

Recommendations For versions prior to 2018-03-17, consider disabling the libevt record values read event() function until a patch is available or apply configuration changes to restrict the use of this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.