VDB

CVE-2017-17440

CVE-2017-17440 PUBLISHED

GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c.

EPSS 0.53% · 67.6th percentile

Risk Scores

EPSS Score
0.53%
67.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlibextractor1:1.2-1ubuntu1, 1:1.3-1, 1:1.3-1ubuntu0.1~esm1
Ubuntu:16.04:LTSlibextractor0, 1:1.3-2build1, 1:1.3-2ubuntu1

Exploit Intelligence

Timeline

  • Dec 6, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›