PT-2018-15320
CVE-2018-20348
·
Published
2018-12-22
·
Updated
2019-10-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libpff versions prior to experimental-20180714
Description
The issue allows attackers to cause a denial of service, specifically an infinite recursion, via a crafted file. This is related to the function
libfdata tree get node value in libfdata tree.c.Recommendations
For versions prior to experimental-20180714, update to a version that includes the fix for the infinite recursion issue in
libpff item tree create node.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾