CVE-2018-11657: High severity miniupnp vulnerability
Published Jun 1, 2018
·Updated
ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.
Affected Software
1 affected component
Miniupnp Project Ngiflib=0.4
Event History
Jun 1, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11657?
CVE-2018-11657 is classified as a high-severity vulnerability due to the potential for causing denial-of-service through an infinite loop.
2
How do I fix CVE-2018-11657?
To mitigate CVE-2018-11657, upgrade ngiflib to a version that contains the fix for the infinite loop issue.
3
What components are affected by CVE-2018-11657?
CVE-2018-11657 specifically affects MiniUPnP ngiflib version 0.4.
4
What does the CVE-2018-11657 vulnerability affect?
CVE-2018-11657 affects the DecodeGifImg and LoadGif functions within ngiflib, leading to potential infinite loops.
5
Is CVE-2018-11657 exploitable remotely?
CVE-2018-11657 can be exploited remotely when processing malicious GIF images through the affected ngiflib library.