CVE-2017-5834: Medium severity libimobiledevice libplist vulnerability
Published Mar 3, 2017
·Updated
The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service
Affected Software
2 affected componentsFixes available
libimobiledevice libplist
Microsoft cbl2 libplist 2.1.0-4
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 3, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 1, 2025
Data Sourced
via Microsoft·11:10 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·11:10 PM
Affected Software
Updated
via Microsoft·11:10 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2017-5834?
The severity of CVE-2017-5834 is categorized as a denial of service vulnerability due to an out-of-bounds heap read leading to a crash.
2
How do I fix CVE-2017-5834?
To fix CVE-2017-5834, update to the latest version of libplist that addresses the vulnerability.
3
What causes CVE-2017-5834?
CVE-2017-5834 is caused by the parse_dict_node function in libplist mishandling crafted files, enabling attackers to exploit it.
4
Which software is affected by CVE-2017-5834?
CVE-2017-5834 affects libplist within the libimobiledevice suite.
5
What type of attack is CVE-2017-5834 associated with?
CVE-2017-5834 is associated with denial of service attacks resulting in crashes.