CVE-2017-11624

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the…

published July 25, 2017

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Published
2017-07-25T23:00Z
EPSS history
Timeline
  • 25 JUL 23:00Z
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the…
    cvelistv5