Search for packages
Package details: pkg:deb/ubuntu/libextractor@1:1.8-1
purl pkg:deb/ubuntu/libextractor@1:1.8-1
Next non-vulnerable version 1:1.9-2
Latest non-vulnerable version 1:1.9-2
Risk 3.1
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-cmkk-vwr1-aaab
Aliases:
CVE-2018-20431
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
1:1.9-2
Affected by 0 other vulnerabilities.
VCID-uxcp-g9a8-aaac
Aliases:
CVE-2018-20430
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
1:1.9-2
Affected by 0 other vulnerabilities.
VCID-wxpt-x86d-aaam
Aliases:
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
1:1.9-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-51mp-26hv-aaah GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c). CVE-2018-14346
VCID-qjr6-t5ue-aaar GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c. CVE-2018-16430
VCID-sy67-jv4b-aaaf GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c). CVE-2018-14347

Date Actor Action Vulnerability Source VulnerableCode Version