CVE-2017-5209: Critical severity libimobiledevice libplist vulnerability
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5209?
CVE-2017-5209 has a medium severity rating due to its potential for information disclosure and denial of service.
How do I fix CVE-2017-5209?
To fix CVE-2017-5209, upgrade to libplist version 1.12 or later, where the vulnerability has been addressed.
What are the potential impacts of CVE-2017-5209?
CVE-2017-5209 can lead to sensitive information disclosure or a denial of service through buffer over-read.
Is CVE-2017-5209 remotely exploitable?
CVE-2017-5209 is typically considered not remotely exploitable as it requires specific conditions to be met.
Which versions of libplist are affected by CVE-2017-5209?
CVE-2017-5209 affects all versions of libplist up to and including version 1.12.