CVE-2018-11723

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information…

published June 19, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.6th percentile
Published
2018-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information…
    cvelistv5