Search for vulnerabilities
Vulnerability details: VCID-54uk-rmny-aaad
Vulnerability ID VCID-54uk-rmny-aaad
Aliases CVE-2017-15277
Summary ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
System Score Found at
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15277.html
cvssv3 3.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15277.json
epss 0.01228 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01228 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01228 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01228 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.01808 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50403 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50442 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.50442 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.51513 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.53103 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.53103 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.53103 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.53103 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
epss 0.57782 https://api.first.org/data/v1/epss?cve=CVE-2017-15277
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1510426
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11352
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11640
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12431
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12640
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12877
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12983
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13139
generic_textual Negligible https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13144
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
generic_textual Negligible https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13758
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13769
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14224
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14607
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14682
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14989
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16546
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
cvssv2 4.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual Medium https://github.com/neex/gifoeb
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2017-15277
cvssv3 6.5 https://nvd.nist.gov/vuln/detail/CVE-2017-15277
generic_textual Low https://ubuntu.com/security/notices/USN-3681-1
generic_textual Medium https://ubuntu.com/security/notices/USN-4232-1
generic_textual Medium https://usn.ubuntu.com/usn/usn-3681-1
generic_textual Medium https://usn.ubuntu.com/usn/usn-4232-1
Reference id Reference type URL
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15277.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15277.json
https://api.first.org/data/v1/epss?cve=CVE-2017-15277
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11640
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12431
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12640
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12877
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12983
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13758
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13769
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14224
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14607
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14682
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16546
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/ImageMagick/ImageMagick/commit/9fd10cf630832b36a588c1545d8736539b2f1fb5
https://github.com/ImageMagick/ImageMagick/issues/592
https://github.com/neex/gifoeb
https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
https://ubuntu.com/security/notices/USN-3681-1
https://ubuntu.com/security/notices/USN-4232-1
https://usn.ubuntu.com/3681-1/
https://usn.ubuntu.com/4232-1/
https://usn.ubuntu.com/usn/usn-3681-1
https://usn.ubuntu.com/usn/usn-4232-1
https://www.debian.org/security/2017/dsa-4032
https://www.debian.org/security/2017/dsa-4040
https://www.debian.org/security/2018/dsa-4321
1510426 https://bugzilla.redhat.com/show_bug.cgi?id=1510426
878578 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878578
cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*
CVE-2017-15277 https://nvd.nist.gov/vuln/detail/CVE-2017-15277
No exploits are available.
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15277.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-15277
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-15277
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.85138
EPSS Score 0.01228
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.