Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Libpff Project Clear all filters
TI-2018-14403 CVE-2018-20348 · GHSA-8pp8-7wvw-f67f

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714…

Priority LOW 25

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00431 Published 2018-12-22 No fix listed CWE-835
TI-2018-08386 CVE-2018-11723 · GHSA-fjv9-r9p4-38h5

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff…

Priority LOW 27

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01142 Published 2018-06-19 No fix listed CWE-125