Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-7998
HistoryMar 09, 2018 - 7:29 p.m.

Race condition

2018-03-0919:29:00
PRIOn knowledge base
www.prio-n.com
3

8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted image file. This occurs because of a race condition involving a failed delayed load and other worker threads.

CPENameOperatorVersion
debian_linuxeq7.0
libvipslt8.6.3

8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%