Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17440

Опубликовано: 06 дек. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1:1.6-2
cosmic

not-affected

1:1.6-2
devel

not-affected

1:1.6-2
disco

not-affected

1:1.6-2
eoan

not-affected

1:1.6-2
esm-apps/bionic

not-affected

1:1.6-2
esm-apps/focal

not-affected

1:1.6-2
esm-apps/jammy

not-affected

1:1.6-2
esm-apps/noble

not-affected

1:1.6-2

Показывать по

EPSS

Процентиль: 77%
0.01003
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
около 8 лет назад

GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c.

CVSS3: 6.5
debian
около 8 лет назад

GNU Libextractor 1.6 allows remote attackers to cause a denial of serv ...

CVSS3: 6.5
github
больше 3 лет назад

GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c.

EPSS

Процентиль: 77%
0.01003
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3