Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
1.9
CVSSv2

CVE-2017-6437

Published: 15/03/2017 Updated: 04/04/2017
CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4
CVSS v3 Base Score: 5 | Impact Score: 3.6 | Exploitability Score: 1.3
VMScore: 169
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Libplist

Vulnerability Summary

The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.

Vulnerable Product Search on Vulmon Subscribe to Product

libplist project libplist 1.12

Vendor Advisories

Debian CVElist Bug Report Logs: libplist: CVE-2017-6438
Debian Bug report logs - #858786 libplist: CVE-2017-6438 Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 26 Mar 2017 19:39:01 UTC Severity: important Tags: fixed-upstream, patch, secur ...
Debian CVElist Bug Report Logs: libplist: CVE-2017-6440: Memory allocation error in parse_data_node
Debian Bug report logs - #858055 libplist: CVE-2017-6440: Memory allocation error in parse_data_node Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 Mar 2017 19:33:05 UTC Severity: ...
Debian CVElist Bug Report Logs: libplist: CVE-2017-6437
Debian Bug report logs - #858787 libplist: CVE-2017-6437 Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 26 Mar 2017 19:39:04 UTC Severity: important Tags: fixed-upstream, patch Found ...
Red Hat: CVE-2017-6437
An out-of-bounds read flaw was found in libplist A specially crafted plist file could be used by an attacker to crash the application using libplist ...
Arch Linux Issues:
The base64encode function in base64c in libimobiledevice libplist 112 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file ...

References

CWE-125https://github.com/libimobiledevice/libplist/issues/100http://www.securityfocus.com/bid/97291https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858786https://access.redhat.com/security/cve/cve-2017-6437
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook