libbpg 'image_alloc()' Function Null Pointer Dereference Denial of Service Vulnerability

libbpg is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition.

libbpg 0.9.7 is vulnerable; other versions may also be affected.

Information

Bugtraq ID: 97963
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2017-2575

Remote: Yes
Local: No
Published: Apr 20 2017 12:00AM
Updated: Apr 24 2017 02:08PM
Credit: Meifang, Yang @VARAS of IIE.
Vulnerable: libbpg libbpg 0.9.7

Not Vulnerable:

Exploit

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

References:

• CVE-2017-2575 libbpg: NULL pointer dereference in image_alloc (Andrej Nemec)
  
• libbpg Homepage (libbpg)
  

Source: www.securityfocus.com