312 matches found
DEBIAN-CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
Out-of-bounds
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
UBUNTU-CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
CVE-2018-16430
CVE-2018-16430 affects GNU Libextractor up to 1.7, with an out-of-bounds read in EXTRACTOR_zip_extract_method() implemented in zip_extractor.c. The vulnerability arises from handling ZIP File Comment fields, as indicated by multiple advisories and vendor notices (Debian, Mageia, Ubuntu). Impact i...
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...
GNU Libextractor Out-of-Bounds Read Vulnerability
GNU Libextractor is a library for extracting metadata from files. An out-of-bounds read vulnerability exists in GNU Libextractor. An attacker could exploit this vulnerability to cause a denial of service...
Debian DLA-1478-1 : libextractor security update
It was discovered that there were two vulnerabilities in libextractor, a library to obtain metadata from files of arbitrary type. - A stack-based buffer overflow in unzip.c. CVE-2018-14346 - An infinite loop vulnerability in mpegextractor.c. CVE-2018-14347 For Debian 8 'Jessie', these issues have...
[SECURITY] [DLA-1478-1] libextractor security update
Package : libextractor Version : 1:1.3-2+deb8u2 CVE ID : CVE-2018-14346 CVE-2018-14347 Debian Bug : 904903 904905 It was discovered that there were two vulnerabilities in libextractor, a library to obtain metadata from files of arbitrary type. A stack-based buffer overflow in unzip.c...
DLA-1478-1 libextractor - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1478-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ASA-201807-16] libextractor: denial of service
Arch Linux Security Advisory ASA-201807-16 ========================================== Severity: Medium Date : 2018-07-26 CVE-ID : CVE-2017-17440 Package : libextractor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-541 Summary ======= The package libextractor befo...
GNU Libextractor mpeg_extractor.c File Infinite Loop Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. An infinite loop vulnerability exists in the 'EXTRACTORmpegextractmethod' function mpegextractor.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to...
GNU Libextractor Buffer Overflow Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A stack-based buffer overflow vulnerability exists in the 'ecreadfilefunc' function unzip.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to execute...
CVE-2018-14347
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...
UBUNTU-CVE-2018-14347
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...
CVE-2018-14346
GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...
CVE-2018-14347
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...