Lucene search

K
osvGoogleOSV:CVE-2017-2808
HistorySep 05, 2017 - 6:29 p.m.

CVE-2017-2808

2017-09-0518:29:00
Google
osv.dev
1

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability.

Rows per page:
1-10 of 251

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%