CVE-2017-12481

High

Published: 04/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Risk Assessment

Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service downtime and data loss.

Recommendation

It is recommended to update to the latest version of Ledger to mitigate this vulnerability and to monitor systems for suspicious files.

Other vulnerabilities in Ledger 3.1.1

CVE-2017-12482High
The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS