Lucene search
K

113 matches found

Debian CVE
Debian CVE
added 2017/10/26 6:0 p.m.21 views

CVE-2017-15922

In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c...

5.5CVSS6.1AI score0.00177EPSS
Exploits1
CNVD
CNVD
added 2017/10/19 12:0 a.m.0 views

GNU Libextractor Null Pointer Backreference Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORnsfextractmethod' function in the plugins/nsfextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to cau...

7.5CVSS7.4AI score0.01659EPSS
Exploits1References1
CNVD
CNVD
added 2017/10/19 12:0 a.m.1 views

GNU Libextractor Heap Buffer Overflow Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A heap-based buffer overflow vulnerability exists in the 'EXTRACTORpngextractmethod' function in the plugins/pngextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this...

7.5CVSS7.6AI score0.00432EPSS
Exploits1References1
OSV
OSV
added 2017/10/18 9:29 p.m.2 views

UBUNTU-CVE-2017-15601

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...

7.5CVSS7.4AI score0.00432EPSS
Exploits1References5
NVD
NVD
added 2017/10/18 9:29 p.m.18 views

CVE-2017-15601

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...

7.5CVSS7.6AI score0.00432EPSS
Exploits1References3
NVD
NVD
added 2017/10/18 9:29 p.m.10 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.3AI score0.00408EPSS
Exploits1References3
OSV
OSV
added 2017/10/18 9:29 p.m.2 views

DEBIAN-CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.5AI score0.00408EPSS
Exploits1References1
OSV
OSV
added 2017/10/18 9:29 p.m.0 views

UBUNTU-CVE-2017-15600

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c...

7.5CVSS7.1AI score0.01659EPSS
Exploits1References5
Prion
Prion
added 2017/10/18 9:29 p.m.11 views

Integer overflow

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

5CVSS7.3AI score0.00408EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/10/18 9:29 p.m.4 views

CVE-2017-15600

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c...

7.5CVSS7.4AI score
Exploits0References4
OSV
OSV
added 2017/10/18 9:29 p.m.5 views

CVE-2017-15601

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...

7.5CVSS7.6AI score
Exploits0References3
Prion
Prion
added 2017/10/18 9:29 p.m.16 views

Null pointer dereference

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c...

5CVSS7.5AI score0.01659EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2017/10/18 9:0 p.m.15 views

CVE-2017-15601

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...

7.7AI score0.00432EPSS
Exploits1References3
CVE
CVE
added 2017/10/18 9:0 p.m.64 views

CVE-2017-15600

CVE-2017-15600 affects GNU Libextractor version 1.4 and involves a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function (plugins/nsf_extractor.c). The issue can cause a denial of service via a crash when processing certain inputs. The initial description and connected documents c...

7.5CVSS7.3AI score0.01659EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2017/10/18 9:0 p.m.74 views

CVE-2017-15602

GNU Libextractor 1.4 contains a signedness error in EXTRACTOR_nsfe_extract_method (plugins/nsfe_extractor.c) that can cause an infinite loop when given a crafted chunk size. Affected component is the nsfe_extractor, with the root cause described as an integer signedness issue for chunk size. The ...

7.5CVSS7.2AI score0.00408EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/10/18 9:0 p.m.13 views

CVE-2017-15600

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c...

7.4AI score0.01659EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2017/10/18 9:0 p.m.23 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.4AI score0.00408EPSS
Exploits1
Cvelist
Cvelist
added 2017/10/18 9:0 p.m.13 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.3AI score0.00408EPSS
Exploits1References3
CVE
CVE
added 2017/10/18 9:0 p.m.67 views

CVE-2017-15601

CVE-2017-15601: In GNU Libextractor 1.4, there is a heap-based buffer overflow in EXTRACTOR_png_extract_method (plugins/png_extractor.c), related to processiTXt and stndup. Affected as part of Libextractor vulnerabilities tracked across USN/DLA advisories and CNVD entry; impacts include potential...

7.5CVSS7.5AI score0.00432EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2017/10/12 12:0 a.m.1 views

GNU Libextractor Denial of Service Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A denial of service vulnerability exists in the 'EXTRACTORwavextractmethod' method of the wavextractor.c file in GNU Libextractor version 1.4, which stems from the program failing to detect the...

5.5CVSS6AI score0.00363EPSS
Exploits1References1
Rows per page
Query Builder