Skip to content

CVE-2017-8891 Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads.

MediumCVSS 5.5 EPSS 0.92%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads.

Affected products

ProductAffected versionsFixed in
dropbox lepton = 1.2.1 No fix listed

References

  • openwall.com mailing-list patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory