Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Workstation Extension 12 SP2 package libplist, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (12)
CVE-2017-5209 — CVSS 9.1 (critical): The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from…
CVE-2017-5545 — CVSS 9.1 (critical): The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process…
CVE-2017-5835 — CVSS 7.5 (high): libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
CVE-2017-5836 — CVSS 7.5 (high): The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer…
CVE-2017-6438 — CVSS 7.3 (high): Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a…
CVE-2017-7982 — CVSS 5.5 (medium): Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause…
CVE-2017-5834 — CVSS 5.5 (medium): The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via…
CVE-2017-6437 — CVSS 5.0 (medium): The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds…
CVE-2017-6436 — CVSS 5.0 (medium): The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…
CVE-2017-6439 — CVSS 5.0 (medium): Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a…
CVE-2017-6440 — CVSS 5.0 (medium): The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…
CVE-2017-6435 — CVSS 5.0 (medium): The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…