CVE-2017-0357 iucode-tool: heap buffer overflow on -tr loader

2018-04-1315:00:00

debian

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.

CNA Affected

[
  {
    "product": "iucode-tool",
    "vendor": "iucode-tool",
    "versions": [
      {
        "status": "affected",
        "version": "starting with v1.4; before v2.1.1"
      }
    ]
  }
]