Search for vulnerabilities
Vulnerability details: VCID-xgs6-s7vw-aaas
Vulnerability ID VCID-xgs6-s7vw-aaas
Aliases CVE-2017-16352
Summary GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.
Status Published
Exploitability 2.0
Weighted Severity 7.9
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
generic_textual Medium http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=7292230dd185
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16352.html
cvssv3 3.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16352.json
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00426 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.19317 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.20103 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.29412 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.29412 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.30306 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
epss 0.41524 https://api.first.org/data/v1/epss?cve=CVE-2017-16352
generic_textual Medium https://blogs.securiteam.com/index.php/archives/3494
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1512043
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
cvssv2 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.6 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2017-16352
cvssv3 8.8 https://nvd.nist.gov/vuln/detail/CVE-2017-16352
generic_textual Medium https://ubuntu.com/security/notices/USN-4232-1
generic_textual Medium https://usn.ubuntu.com/usn/usn-4232-1
Reference id Reference type URL
ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt
http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=7292230dd185
http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=7292230dd185
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16352.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16352.json
https://api.first.org/data/v1/epss?cve=CVE-2017-16352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html
https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
https://ubuntu.com/security/notices/USN-4232-1
https://usn.ubuntu.com/4232-1/
https://usn.ubuntu.com/usn/usn-4232-1
https://www.debian.org/security/2018/dsa-4321
https://www.exploit-db.com/exploits/43111/
http://www.securityfocus.com/bid/101658
1512043 https://bugzilla.redhat.com/show_bug.cgi?id=1512043
cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2017-16352 https://nvd.nist.gov/vuln/detail/CVE-2017-16352
CVE-2017-16353;CVE-2017-16352 Exploit https://blogs.securiteam.com/index.php/archives/3494
CVE-2017-16353;CVE-2017-16352 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/43111.py
Data source Exploit-DB
Date added Nov. 3, 2017
Description GraphicsMagick - Memory Disclosure / Heap Overflow
Ransomware campaign use Unknown
Source publication date Nov. 3, 2017
Exploit type dos
Platform multiple
Source update date Nov. 3, 2017
Source URL https://blogs.securiteam.com/index.php/archives/3494
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16352.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-16352
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-16352
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.74853
EPSS Score 0.00426
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.