Denial of Service Vulnerability in libpff_item_tree_create_node in libpff

Denial of Service Vulnerability in libpff_item_tree_create_node in libpff

CVE-2018-20348 · LOW Severity

AV:L/AC:M/AU:N/C:N/I:N/A:P

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

Learn more about our Web Application Penetration Testing UK.