Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist++-dev" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist++-dev-dbgsym" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist++1" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist++1-dbgsym" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-dbg" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-dev" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-dev-dbgsym" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-doc" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-utils" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist-utils-dbgsym" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist1" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "libplist1-dbgsym" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "python-plist" }, { "binary_version": "1.10-1ubuntu0.1", "binary_name": "python-plist-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist++-dev" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist++-dev-dbgsym" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist++3v5" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist++3v5-dbgsym" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-dbg" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-dev" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-dev-dbgsym" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-doc" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-utils" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist-utils-dbgsym" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist3" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "libplist3-dbgsym" }, { "binary_version": "1.12-3.1ubuntu0.16.04.1", "binary_name": "python-plist" } ] }