CVE-2017-9773

EUVD-2017-18703
Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.7 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
hordehorde_image
2.0.0
hordehorde_image
2.0.0:alpha1
hordehorde_image
2.0.0:beta1
hordehorde_image
2.0.0:beta2
hordehorde_image
2.0.1
hordehorde_image
2.0.2
hordehorde_image
2.0.3
hordehorde_image
2.0.4
hordehorde_image
2.0.5
hordehorde_image
2.0.6
hordehorde_image
2.0.7
hordehorde_image
2.0.9
hordehorde_image
2.1.0
hordehorde_image
2.1.1
hordehorde_image
2.1.8
hordehorde_image
2.1.10
hordehorde_image
2.2.0
hordehorde_image
2.2.1
hordehorde_image
2.3.0
hordehorde_image
2.3.1
hordehorde_image
2.3.2
hordehorde_image
2.3.3
hordehorde_image
2.3.4
hordehorde_image
2.3.5
hordehorde_image
2.3.6
hordehorde_image
2.3.7
hordehorde_image
2.4.0
hordehorde_image
2.4.1
hordehorde_image
2.4.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
php-horde-image
bookworm
2.6.1-2
fixed
bullseye
2.6.1-2
fixed
jessie
not-affected
sid
2.6.1-2
fixed
trixie
2.6.1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php-horde-image
artful
ignored
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
needed
yakkety
ignored
zesty
ignored
Common Weakness Enumeration
References
https://lists.horde.org/archives/announce/2017/001234.html
https://www.debian.org/security/2018/dsa-4276
https://lists.horde.org/archives/announce/2017/001234.html
https://www.debian.org/security/2018/dsa-4276