Vulnerabilities > CVE-2017-15364 - Double Free vulnerability in Ccsv Project Ccsv 1.1.0

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
ccsv-project
CWE-415
NVD
Published: 2017-10-15
Updated: 2025-01-06

Summary

The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is not present in version 1.1.0.

Vulnerable Configurations

Part Description Count
Application
Ccsv_Project
1

Common Weakness Enumeration (CWE)

References