Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-20348

Опубликовано: 22 дек. 2018
Источник: debian

Описание

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libpfffixed20180714-1package
libpffno-dsastretchpackage
libpffno-dsajessiepackage

Примечания

  • https://github.com/libyal/libpff/issues/48

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 7 лет назад

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

CVSS3: 5.5
nvd
около 7 лет назад

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

CVSS3: 5.5
github
больше 3 лет назад

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.