CVE-2017-7939 The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file.
MediumCVSS 5.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entropymine imageworsener | = 1.3.0 | No fix listed |
References
- github.com issue-tracking patch third-party-advisory
- GLSA-201706-06 third-party-advisory vendor-advisory