Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libextractor@1:1.6-2?distro=trixie
purl pkg:deb/debian/libextractor@1:1.6-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-bdsg-x852-wfgn GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c. CVE-2017-17440
VCID-tc8j-82se-qfbk In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c. CVE-2017-15922

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:05:54.191764+00:00 Debian Importer Fixing VCID-tc8j-82se-qfbk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T13:05:50.063495+00:00 Debian Importer Fixing VCID-bdsg-x852-wfgn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:00:23.795588+00:00 Debian Importer Fixing VCID-tc8j-82se-qfbk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T09:00:20.107128+00:00 Debian Importer Fixing VCID-bdsg-x852-wfgn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:45.349691+00:00 Debian Importer Fixing VCID-bdsg-x852-wfgn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:45.300386+00:00 Debian Importer Fixing VCID-tc8j-82se-qfbk https://security-tracker.debian.org/tracker/data/json 38.1.0