CVE-2018-14346: Buffer Overflow
Published Jul 17, 2018
·Updated
GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc (unzip.c).
Affected Software
5 affected componentsFixes available
debian/libextractor<=1:1.6-2, <=1:1.3-1
1:1.7-11:1.3-4+deb9u2
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
Debian Debian Linux=8.0
Debian Debian Linux=9.0
GNU Libextractor<1.7
Remediation
Event History
Jul 17, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14346?
CVE-2018-14346 is classified as a high severity vulnerability due to its potential for remote code execution when exploited.
2
How do I fix CVE-2018-14346?
To fix CVE-2018-14346, update your libextractor package to version 1.7 or later.
3
What software is affected by CVE-2018-14346?
CVE-2018-14346 affects GNU Libextractor versions prior to 1.7, especially on Debian systems.
4
Is CVE-2018-14346 exploitable remotely?
Yes, CVE-2018-14346 can be exploited remotely due to a stack-based buffer overflow.
5
What are the consequences of exploiting CVE-2018-14346?
Exploiting CVE-2018-14346 could allow an attacker to execute arbitrary code on the affected systems.