Skip to main content

Lepton CVE-2017-8891

MEDIUM
DEPRECATED: Use of Uninitialized Resource (CWE-1187)
2017-05-10 cve@mitre.org
Denial Of Service Lepton
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
May 10, 2017 - 16:29 cve.org
MEDIUM 5.5

DescriptionCVE.org

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads.

AnalysisAI

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-1187. Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads. Affected products include: Dropbox Lepton.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Lepton

View all
CVE-2022-26181 HIGH POC
7.8 Feb 28

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():sr
CVE-2012-0999 HIGH POC
7.5 Feb 24

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary

CVE-2012-0998 HIGH POC
7.5 Feb 24

Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include a
CVE-2017-7448 MEDIUM POC
5.5 Apr 05

The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers

CVE-2022-4104 MEDIUM POC
5.5 Nov 28

A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compressio
CVE-2018-12108 MEDIUM POC
5.5 Jun 11

An issue was discovered in Dropbox Lepton 1.2.1. Rated medium severity (CVSS 5.5), this vulnerability is no authenticati
CVE-2012-1000 MEDIUM POC
4.3 Feb 24

Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attacke
CVE-2016-6238 MEDIUM
5.5 Feb 02

The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (
CVE-2016-6237 MEDIUM
5.5 Feb 02

The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of serv
CVE-2016-6236 MEDIUM
5.5 Feb 02

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of

CVE-2016-6235 MEDIUM
5.5 Feb 02

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of

CVE-2016-6234 MEDIUM
5.5 Feb 02

The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of servi

Same weakness CWE-1187 – DEPRECATED: Use of Uninitialized Resource

View all
CVE-2019-2323 CRITICAL
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2017-8891 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy