libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libpff | Libpff_project | * | 20180714 (excluding) |
| Libpff | Ubuntu | bionic | * |
| Libpff | Ubuntu | cosmic | * |
| Libpff | Ubuntu | trusty | * |
| Libpff | Ubuntu | xenial | * |