5
CVSSv2

CVE-2017-9434

Published: 05/06/2017 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 448
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Crypto++ (aka cryptopp) up to and including 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cryptopp crypto\\+\\+

Vendor Advisories

Debian Bug report logs - #864214 libcrypto++: CVE-2017-9434: out-of-bounds read in zinflate Package: src:libcrypto++; Maintainer for src:libcrypto++ is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 5 Jun 2017 11:21:05 UTC Severity: important Tags: fixed-u ...
A security issue has been found in crypto++ before 600 where the Zinflate class, used by classes like Gunzip and Inflator, could perform an out-of-bounds read when decompressing data The out-of-bounds read occurs on a static table of 30 elements, allocated in initialized memory An attacker can craft a ZIP file that allows a read of the last two ...