CVE-2017-12482

High

Published: 04/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Risk Assessment

Attackers may exploit this vulnerability to remotely trigger application crashes, leading to service downtime. It may also result in unpredictable effects on the system.

Recommendation

It is recommended to update to the latest version of Ledger to mitigate this vulnerability. Additionally, monitor application logs for potential attack attempts.

Other vulnerabilities in Ledger 3.1.1

CVE-2017-12481High
The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS