Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-15602

Опубликовано: 18 окт. 2017
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1:1.6-2
cosmic

not-affected

1:1.6-2
devel

not-affected

1:1.6-2
disco

not-affected

1:1.6-2
eoan

not-affected

1:1.6-2
esm-apps/bionic

not-affected

1:1.6-2
esm-apps/focal

not-affected

1:1.6-2
esm-apps/jammy

not-affected

1:1.6-2
esm-apps/noble

not-affected

1:1.6-2

Показывать по

EPSS

Процентиль: 61%
0.00408
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.

CVSS3: 7.5
debian
больше 8 лет назад

In GNU Libextractor 1.4, there is an integer signedness error for the ...

CVSS3: 7.5
github
больше 3 лет назад

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.

EPSS

Процентиль: 61%
0.00408
Низкий

5 Medium

CVSS2

7.5 High

CVSS3