CVE-2017-7523
- Source
- https://cve.org/CVERecord?id=CVE-2017-7523
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7523.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-7523
- Published
- 2017-07-21T22:29:00Z
- Modified
- 2026-10-24T10:30:49Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:cygwin:cygwin:1.7.13:*:*:*:*:*:*:*", "cpe:2.3:a:cygwin:cygwin:1.7.6:*:*:*:*:*:*:*", "cpe:2.3:a:cygwin:cygwin:1.8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "1.7.6" }, { "last_affected": "1.7.6" }, { "introduced": "1.7.13" }, { "last_affected": "1.7.13" }, { "introduced": "1.8.0" }, { "last_affected": "1.8.0" } ], "source": "CPE_STRING" } ], "vendor_product": "cygwin:cygwin" } ] }- References
Affected packages
Git / github.com/cygwin/cygwin
Affected ranges
- Type
- GIT
- Repo
- https://github.com/cygwin/cygwin
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.2:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.2" }, { "last_affected": "1.7.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.3:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.3" }, { "last_affected": "1.7.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.5:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.5" }, { "last_affected": "1.7.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.7:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.7" }, { "last_affected": "1.7.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.8:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.8" }, { "last_affected": "1.7.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.9:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.9" }, { "last_affected": "1.7.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.10:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.10" }, { "last_affected": "1.7.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.11:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.11" }, { "last_affected": "1.7.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.12:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.12" }, { "last_affected": "1.7.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.14:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.14" }, { "last_affected": "1.7.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.15:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.15" }, { "last_affected": "1.7.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.16:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.16" }, { "last_affected": "1.7.16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.17:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.17" }, { "last_affected": "1.7.17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.18:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.18" }, { "last_affected": "1.7.18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.19:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.19" }, { "last_affected": "1.7.19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.21:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.21" }, { "last_affected": "1.7.21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.22:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.22" }, { "last_affected": "1.7.22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.23:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.23" }, { "last_affected": "1.7.23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.24:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.24" }, { "last_affected": "1.7.24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.25:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.25" }, { "last_affected": "1.7.25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.26:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.26" }, { "last_affected": "1.7.26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.27:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.27" }, { "last_affected": "1.7.27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.28:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.28" }, { "last_affected": "1.7.28" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.29:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.29" }, { "last_affected": "1.7.29" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.31:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.31" }, { "last_affected": "1.7.31" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.32:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.32" }, { "last_affected": "1.7.32" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.33:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.33" }, { "last_affected": "1.7.33" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.34:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.34" }, { "last_affected": "1.7.34" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:cygwin:cygwin:1.7.35:*:*:*:*:*:*:*", "range": [ { "introduced": "1.7.35" }, { "last_affected": "1.7.35" } ], "source": "CPE_STRING" } ] }