Search for packages
Package details: pkg:deb/ubuntu/libextractor@1:1.6-2ubuntu2
purl pkg:deb/ubuntu/libextractor@1:1.6-2ubuntu2
Next non-vulnerable version 1:1.9-2
Latest non-vulnerable version 1:1.9-2
Risk 4.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-51mp-26hv-aaah
Aliases:
CVE-2018-14346
GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).
1:1.8-1
Affected by 3 other vulnerabilities.
VCID-cmkk-vwr1-aaab
Aliases:
CVE-2018-20431
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
1:1.9-2
Affected by 0 other vulnerabilities.
VCID-qjr6-t5ue-aaar
Aliases:
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
1:1.8-1
Affected by 3 other vulnerabilities.
VCID-sy67-jv4b-aaaf
Aliases:
CVE-2018-14347
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).
1:1.8-1
Affected by 3 other vulnerabilities.
VCID-uxcp-g9a8-aaac
Aliases:
CVE-2018-20430
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
1:1.9-2
Affected by 0 other vulnerabilities.
VCID-wxpt-x86d-aaam
Aliases:
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
1:1.9-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version