CVE-2018-14347: Medium severity debian linux vulnerability
Published Jul 17, 2018
·Updated
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod (mpegextractor.c).
Affected Software
5 affected componentsFixes available
debian/libextractor<=1:1.3-1, <=1:1.6-2
1:1.7-11:1.3-4+deb9u2
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
Debian Debian Linux=8.0
Debian Debian Linux=9.0
GNU Libextractor<1.7
Remediation
Event History
Jul 17, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14347?
CVE-2018-14347 is classified as a high-severity vulnerability due to its potential to cause an infinite loop.
2
How do I fix CVE-2018-14347?
To fix CVE-2018-14347, update GNU Libextractor to version 1.7 or later.
3
What software is affected by CVE-2018-14347?
CVE-2018-14347 affects GNU Libextractor versions prior to 1.7.
4
What type of vulnerability is CVE-2018-14347?
CVE-2018-14347 is an infinite loop vulnerability in the EXTRACTOR_mpeg_extract_method function.
5
In which environments can CVE-2018-14347 be exploited?
CVE-2018-14347 can be exploited in systems running Debian with vulnerable versions of Libextractor.