5.5
CVSSv3

CVE-2017-14108

Published: 05/09/2017 Updated: 03/10/2019
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

libgedit.a in GNOME gedit up to and including 3.22.1 allows remote malicious users to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnome gedit

Vendor Advisories

Debian Bug report logs - #875311 gedit: CVE-2017-14108: CPU consumption via crafted file Package: src:gedit; Maintainer for src:gedit is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 10 Sep 2017 15:27:01 UTC Severity: normal ...
libgedita in GNOME gedit through 3221 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters ...

Exploits

libgedita versions 3221 and below suffer from a denial of service vulnerability ...