libplist (SUSE:Linux Enterprise Server 12 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP1 package libplist, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2017-5209 — CVSS 9.1 (critical): The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from…
• CVE-2017-5545 — CVSS 9.1 (critical): The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process…
• CVE-2017-5835 — CVSS 7.5 (high): libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
• CVE-2017-5836 — CVSS 7.5 (high): The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer…
• CVE-2017-7982 — CVSS 5.5 (medium): Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause…
• CVE-2017-5834 — CVSS 5.5 (medium): The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via…
• CVE-2017-6440 — CVSS 5.0 (medium): The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…