CVE-2017-11590

Fixed in a distro release EPSS 2%

There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack.

Published 2017-07-24 · CVE record · OSV

Products: gnome libgxps

Distro releases