CVE-2017-9988

MEDIUM

Libming - NULL Pointer Dereference

Title source: rule

Description

The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.

References (3)

[Exploit, Third Party Advisory] https://github.com/libming/libming/issues/85

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html

[Third Party Advisory] https://security.gentoo.org/glsa/201904-24

Scores

CVSS v3 6.5

EPSS 0.0063

EPSS Percentile 69.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (3)

libming/libming

debian/debian_linux

n/a/n/a

Published Jun 28, 2017

Tracked Since Feb 18, 2026