suse · CVE-2017-7982

Quick triage

Priority: medium Published: 2021-05-30 13:55:51 UTC Updated: 2026-04-18 09:05:45 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-7982 severity moderate: SUSE including 28 source package names (libplist, libplist++-2_0-4-2.6.0-160000.2.2, …), 96 product×package rows across 39 product lines (SUSE Linux Enterprise Desktop 12 SP1, SUSE Linux Enterprise Desktop 12 SP2, … (39 product lines)): Fixed 84, Known Not Affected 12.

Description:

Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.

cvelogic Threat Intelligence