CVE-2017-8891

2017-05-1016:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads.

CPENameOperatorVersion
leptoneq1.2
leptoneq1.1
leptoneq1.0
leptoneq1.2.1

Name	Operator	Version
lepton	eq	1.2
lepton	eq	1.1
lepton	eq	1.0
lepton	eq	1.2.1

References

openwall.com/lists/oss-security/2017/05/10/1

github.com/dropbox/lepton/commit/82167c144a322cc956da45407f6dce8d4303d346

github.com/dropbox/lepton/issues/87