CVE-2017-9988: Debian Linux
Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.
The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.
Affected products
Published 2017-06-28. Last modified 2026-06-17.