10 matches found
SUSE CVE-2017-6440
The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...
SUSE CVE-2017-6439
Heap-based buffer overflow in the parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service out-of-bounds write via a crafted plist file...
Denial Of Service (DoS)
libplist is susceptible to denial of service DoS attacks. The vulnerability exists because the parsedatanode function in bplist.c does not handle memory allocation properly, allowing a DoS attack using a plif file locally...
Denial Of Service (DoS)
libplist is vulnerable to denial of service DoS attacks. The vulnerability exists because the parsestringnode function in bplist.c does not properly handle malloc failure , allowing the attacker to cause a denial of service through a plist file locally...
CVE-2017-6439
Heap-based buffer overflow in the parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service out-of-bounds write via a crafted plist file...
CVE-2017-6435
The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption via a crafted plist file...
CVE-2017-6436
The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...
CVE-2017-6440
The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...
CVE-2017-5834
The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...
Design/Logic Flaw
The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...