CVE-2017-15267: Null Pointer Dereference
Published Oct 11, 2017
·Updated
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flacmetadata in flacextractor.c.
Affected Software
1 affected component
GNU Libextractor=1.4
Event History
Oct 11, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15267?
CVE-2017-15267 has a medium severity rating due to the potential for exploitation via a NULL pointer dereference.
2
How do I fix CVE-2017-15267?
To fix CVE-2017-15267, update GNU Libextractor to version 1.4 or later.
3
What causes CVE-2017-15267?
CVE-2017-15267 is caused by a NULL pointer dereference in the flac_metadata function within flac_extractor.c.
4
Which software is affected by CVE-2017-15267?
CVE-2017-15267 affects GNU Libextractor version 1.4.
5
Can CVE-2017-15267 lead to denial of service?
Yes, exploitation of CVE-2017-15267 can result in a denial of service condition.