High severity7.8NVD Advisory· Published Aug 4, 2017· Updated Jun 17, 2026

CVE-2017-12481

Description

The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ledger CLI/Ledger2 versions
cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*
- (no CPE)range: <3.1.1
osv-coords4 versions
pkg:rpm/opensuse/ledger&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/ledger&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/ledger&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ledger&distro=SUSE%20Package%20Hub%2015%20SP1
< 3.1.3-lp151.3.3.1+ 3 more
- (no CPE)range: < 3.1.3-lp151.3.3.1
- (no CPE)range: < 3.1.3-lp151.3.3.1
- (no CPE)range: < 3.2.1-3.3
- (no CPE)range: < 3.1.3-bp151.4.3.1

Patches

Vulnerability mechanics

References

bugs.ledger-cli.org/show_bug.cginvdIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.htmlnvd
lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.htmlnvd
security.gentoo.org/glsa/202004-05nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000