Lucene search

K
cvelistMitreCVELIST:CVE-2017-18258
HistoryApr 08, 2018 - 5:00 p.m.

CVE-2017-18258

2018-04-0817:00:00
mitre
www.cve.org
6

AI Score

6

Confidence

High

EPSS

0.017

Percentile

87.9%

The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.