CVE-2017-2580mediumCWE-787

CVE-2017-2580: medium-severity vulnerability in netpbm

Published · Updated

Follow this CVE+ Monitor Netpbm+ Monitor netpbm-free

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.5epss 1.4%
An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Netpbm · netpbm
Related CVEs — netpbm

In the same product, most dangerous first.

CVE-2017-2579LOWCVE-2017-2579EPSS 1.6%CVE-2017-2587LOWCVE-2017-2587EPSS 1.3%CVE-2017-2586LOWCVE-2017-2586EPSS 1.1%CVE-2017-2581MEDIUMCVE-2017-2581EPSS 1.1%