Design/Logic Flaw

2018-06-1113:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file.

CPENameOperatorVersion
leptoneq1.2.1

CPE	Name	Operator	Version
	lepton	eq	1.2.1

References

github.com/dropbox/lepton/issues/107