CVE-2017-15922: Medium severity libextractor vulnerability
Published Oct 26, 2017
·Updated
In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c.
Affected Software
2 affected componentsFixes available
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
GNU Libextractor=1.4
Event History
Oct 26, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15922?
CVE-2017-15922 is classified as a medium severity vulnerability that results in an out-of-bounds read.
2
How do I fix CVE-2017-15922?
To address CVE-2017-15922, upgrade to a patched version of the GNU Libextractor, such as 1.8-2+deb10u1 or later.
3
What versions of Libextractor are affected by CVE-2017-15922?
CVE-2017-15922 affects GNU Libextractor version 1.4.
4
What type of vulnerability is represented by CVE-2017-15922?
CVE-2017-15922 is an out-of-bounds read vulnerability in the EXTRACTOR_dvi_extract_method function.
5
Who is responsible for fixing CVE-2017-15922?
The maintainers of GNU Libextractor are responsible for addressing CVE-2017-15922 through updates and patches.