Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5836

Опубликовано: 15 янв. 2017
Источник: redhat
CVSS3: 4.4

Описание

The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libplistWill not fix
Red Hat Enterprise Linux 7libplistWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1418593libplist: Type inconsistency in bplist.c

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

CVSS3: 7.5
nvd
почти 9 лет назад

The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

CVSS3: 7.5
msrc
4 месяца назад

The plist_free_data function libplist allows attackers to cause a denial of service

CVSS3: 7.5
debian
почти 9 лет назад

The plist_free_data function in plist.c in libplist allows attackers t ...

CVSS3: 7.5
github
больше 3 лет назад

The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

4.4 Medium

CVSS3