CVE-2018-20348

Name of the Vulnerable Software and Affected Versions libpff versions prior to experimental-20180714

Description The issue allows attackers to cause a denial of service, specifically an infinite recursion, via a crafted file. This is related to the function libfdata tree get node value in libfdata tree.c.

Recommendations For versions prior to experimental-20180714, update to a version that includes the fix for the infinite recursion issue in libpff item tree create node.