CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2017-18258
Severity
MEDIUM
CVSS
6.5
EPSS
2.71%
Original NVD Description
The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.
Related CVEs
Other vulnerabilities affecting the same vendor(s)