debian/libplist vulnerabilities

Latest debian/libplist CVEs

Newest publication first

1. DLA-2168-1 libplist - security update

   Published 2020-04-02

   Unknown

2. CVE-2017-7982 Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica...

   Published 2017-04-20

   Medium·CVSS 5.5 EPSS 1.5%

   Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.

3. DLA-870-1 libplist - security update

   Published 2017-03-24

   Unknown

4. CVE-2017-6440 The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

   Published 2017-03-15

   Medium·CVSS 5.0 EPSS 0.44%

   The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

5. CVE-2017-6439 Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist fil...

   Published 2017-03-15

   Medium·CVSS 5.0 EPSS 0.55%

   Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

6. CVE-2017-6438 Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code exec...

   Published 2017-03-15

   High·CVSS 7.3 EPSS 0.68%

   Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.

7. CVE-2017-6437 The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.

   Published 2017-03-15

   Medium·CVSS 5.0 EPSS 0.44%

   The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.

8. CVE-2017-6436 The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

   Published 2017-03-15

   Medium·CVSS 5.0 EPSS 0.53%

   The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

9. CVE-2017-6435 The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.

   Published 2017-03-15

   Medium·CVSS 5.0 EPSS 0.53%

   The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.

10. CVE-2017-5836 The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an inva...

    Published 2017-03-03

    High·CVSS 7.5 EPSS 2.8%

    The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

11. CVE-2017-5835 libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

    Published 2017-03-03

    High·CVSS 7.5 EPSS 2.9%

    libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

12. CVE-2017-5834 The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

    Published 2017-03-03

    Medium·CVSS 5.5 EPSS 1.3%

    The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

13. DLA-840-1 libplist - security update

    Published 2017-02-28

    Unknown

14. DLA-811-1 libplist - security update

    Published 2017-01-31

    Unknown

15. CVE-2017-5545 The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Appl...

    Published 2017-01-21

    Critical·CVSS 9.1 EPSS 3.8%

    The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.

16. CVE-2017-5209 The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via...

    Published 2017-01-11

    Critical·CVSS 9.1 EPSS 2.9%

    The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.