Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.3
CVSSv3

CVE-2017-6438

Published: 15/03/2017 Updated: 04/04/2017
CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4
CVSS v3 Base Score: 7.3 | Impact Score: 5.9 | Exploitability Score: 1.3
VMScore: 392
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Libplist Project

Vulnerability Summary

Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.

Vulnerable Product Search on Vulmon Subscribe to Product

libplist project libplist 1.12

Vendor Advisories

Debian CVElist Bug Report Logs: libplist: CVE-2017-6438
Debian Bug report logs - #858786 libplist: CVE-2017-6438 Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 26 Mar 2017 19:39:01 UTC Severity: important Tags: fixed-upstream, patch, secur ...
Debian CVElist Bug Report Logs: libplist: CVE-2017-6440: Memory allocation error in parse_data_node
Debian Bug report logs - #858055 libplist: CVE-2017-6440: Memory allocation error in parse_data_node Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 Mar 2017 19:33:05 UTC Severity: ...
Debian CVElist Bug Report Logs: libplist: CVE-2017-6437
Debian Bug report logs - #858787 libplist: CVE-2017-6437 Package: src:libplist; Maintainer for src:libplist is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 26 Mar 2017 19:39:04 UTC Severity: important Tags: fixed-upstream, patch Found ...
Red Hat: CVE-2017-6438
Heap-based buffer overflow in the parse_unicode_node function in bplistc in libimobiledevice libplist 112 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file ...
Arch Linux Issues:
Heap-based buffer overflow in the parse_unicode_node function in bplistc in libimobiledevice libplist 112 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file ...

References

CWE-787https://github.com/libimobiledevice/libplist/issues/98http://www.securityfocus.com/bid/97281https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858786https://access.redhat.com/security/cve/cve-2017-6438
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook