CVE:CVE-2018-5345
CNNVD:CNNVD-201801-408
GNOME gcab是GNOME项目的一个用来创建cabinet文件的GObject库。
GNOME gcab 0.7.4及之前的版本中存在基于栈的缓冲区溢出漏洞。攻击者可借助特制的.cab文件利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade fedoraproject fedora to a higher version than -; Upgrade gnome gcab to a higher version than 0.7.4,and avoid the version (,0.7.4]; Upgrade canonical ubuntu_linux to a higher version than 16.04,17.10,and avoid the version 16.04,17.10; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,and avoid the version 7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0