critical9.8
CVE-2017-0357
A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
Impact
A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iucode-Tool Project | Iucode-Tool | from 1.4 before 2.1.1 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95432
- https://gitlab.com/iucode-tool/iucode-tool/issues/3
- https://security-tracker.debian.org/tracker/CVE-2017-0357
- http://www.securityfocus.com/bid/95432
- https://gitlab.com/iucode-tool/iucode-tool/issues/3
- https://security-tracker.debian.org/tracker/CVE-2017-0357