Search for packages
Package details: pkg:deb/debian/libextractor@1:1.8-2%2Bdeb10u1
purl pkg:deb/debian/libextractor@1:1.8-2%2Bdeb10u1
Next non-vulnerable version 1:1.11-2
Latest non-vulnerable version 1:1.11-2
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-wxpt-x86d-aaam
Aliases:
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
1:1.11-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (13)
Vulnerability Summary Aliases
VCID-1jsb-59c4-aaaa In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c. CVE-2017-15922
VCID-51mp-26hv-aaah GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c). CVE-2018-14346
VCID-cezx-1fgu-aaag GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c. CVE-2017-17440
VCID-cmkk-vwr1-aaab GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c. CVE-2018-20431
VCID-g35u-uw2f-aaaq In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c. CVE-2017-15600
VCID-hysv-bsyb-aaae In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup. CVE-2017-15601
VCID-qjr6-t5ue-aaar GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c. CVE-2018-16430
VCID-rmjf-ck1d-aaap In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate. CVE-2017-15266
VCID-sy67-jv4b-aaaf GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c). CVE-2018-14347
VCID-uxcp-g9a8-aaac GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c. CVE-2018-20430
VCID-wxpt-x86d-aaam GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c. CVE-2019-15531
VCID-xsvn-k8bd-aaac In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c. CVE-2017-15267
VCID-zs59-w9ws-aaap In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size. CVE-2017-15602

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:56:55.378206+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:39:41.021840+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:03:40.830059+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T16:49:35.140356+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:55:00.175432+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:36:31.151663+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:31:08.915280+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:29:15.349575+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:05:12.888449+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:53:17.289051+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:11:24.918954+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:46:21.521978+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:13:55.032416+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:51:29.399470+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:34:21.251567+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T04:51:27.137142+00:00 Debian Oval Importer Affected by VCID-wxpt-x86d-aaam None 36.1.3
2025-06-21T01:19:49.230740+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah None 36.1.3
2025-06-21T00:51:56.914027+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf None 36.1.3
2025-06-21T00:15:19.007255+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap None 36.1.3
2025-06-20T23:44:35.567681+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab None 36.1.3
2025-06-20T23:41:24.231512+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac None 36.1.3
2025-06-20T23:29:58.590097+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq None 36.1.3
2025-06-20T23:18:07.626228+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac None 36.1.3
2025-06-20T23:00:50.986243+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa None 36.1.3
2025-06-20T22:47:17.222833+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae None 36.1.3
2025-06-20T22:20:23.321097+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam None 36.1.3
2025-06-20T20:48:07.176744+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar None 36.1.3
2025-06-20T20:36:50.060662+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag None 36.1.3
2025-06-20T20:16:11.841605+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap None 36.1.3
2025-06-08T12:50:37.757609+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T12:30:06.785909+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T12:06:05.208467+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:59:45.713479+00:00 Debian Oval Importer Affected by VCID-wxpt-x86d-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:26:21.377305+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:09:50.230305+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T09:48:39.943895+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T09:34:47.059513+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:48:15.565615+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:31:02.237754+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:25:40.543813+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:23:47.971863+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:58:37.644394+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:46:36.167675+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:04:44.715723+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:40:32.499498+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:18:58.212425+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:04:54.529105+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T04:53:18.661828+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T22:28:40.955575+00:00 Debian Oval Importer Affected by VCID-wxpt-x86d-aaam None 36.1.0
2025-06-07T18:42:35.996210+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah None 36.1.0
2025-06-07T18:14:19.502549+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf None 36.1.0
2025-06-07T17:38:12.322848+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap None 36.1.0
2025-06-07T17:07:29.606451+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab None 36.1.0
2025-06-07T17:04:19.447321+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac None 36.1.0
2025-06-07T16:52:53.684972+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq None 36.1.0
2025-06-07T16:41:07.102631+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac None 36.1.0
2025-06-07T16:24:01.547249+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa None 36.1.0
2025-06-07T16:11:11.919634+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae None 36.1.0
2025-06-07T15:44:32.974076+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam None 36.1.0
2025-06-07T14:19:34.367497+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar None 36.1.0
2025-06-07T14:09:24.306660+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag None 36.1.0
2025-06-07T13:56:06.459509+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap None 36.1.0
2025-04-12T22:17:14.600512+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:09:13.492871+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:38:13.522971+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:09:05.457576+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:55:54.929048+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:48:38.012430+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:02:11.708864+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:37:38.730129+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:16:28.130088+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:51:34.177010+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:45:02.246311+00:00 Debian Oval Importer Affected by VCID-wxpt-x86d-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:10:30.438279+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:53:19.221854+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T08:20:57.236995+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T08:07:08.584158+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:19:51.184821+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:02:27.954373+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:57:02.536558+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:55:09.707108+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:31:01.724450+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:19:11.453681+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:37:25.234934+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:12:58.782204+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:50:01.663132+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:35:48.219150+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:24:31.005524+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T21:00:14.922878+00:00 Debian Oval Importer Affected by VCID-wxpt-x86d-aaam None 36.0.0
2025-04-07T17:20:24.886553+00:00 Debian Oval Importer Fixing VCID-51mp-26hv-aaah None 36.0.0
2025-04-07T16:51:45.254769+00:00 Debian Oval Importer Fixing VCID-sy67-jv4b-aaaf None 36.0.0
2025-04-07T16:13:00.819514+00:00 Debian Oval Importer Fixing VCID-zs59-w9ws-aaap None 36.0.0
2025-04-07T15:40:59.549417+00:00 Debian Oval Importer Fixing VCID-cmkk-vwr1-aaab None 36.0.0
2025-04-07T15:37:40.700192+00:00 Debian Oval Importer Fixing VCID-xsvn-k8bd-aaac None 36.0.0
2025-04-07T15:25:47.092783+00:00 Debian Oval Importer Fixing VCID-g35u-uw2f-aaaq None 36.0.0
2025-04-07T15:13:30.659240+00:00 Debian Oval Importer Fixing VCID-uxcp-g9a8-aaac None 36.0.0
2025-04-07T14:55:51.675263+00:00 Debian Oval Importer Fixing VCID-1jsb-59c4-aaaa None 36.0.0
2025-04-07T14:42:34.043186+00:00 Debian Oval Importer Fixing VCID-hysv-bsyb-aaae None 36.0.0
2025-04-07T14:15:18.315870+00:00 Debian Oval Importer Fixing VCID-wxpt-x86d-aaam None 36.0.0
2025-04-07T12:52:20.998054+00:00 Debian Oval Importer Fixing VCID-qjr6-t5ue-aaar None 36.0.0
2025-04-07T12:42:50.748336+00:00 Debian Oval Importer Fixing VCID-cezx-1fgu-aaag None 36.0.0
2025-04-07T12:30:49.505656+00:00 Debian Oval Importer Fixing VCID-rmjf-ck1d-aaap None 36.0.0