CVE-2018-16430: High severity libextractor vulnerability
Published Sep 4, 2018
·Updated
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod() in zipextractor.c.
Affected Software
5 affected componentsFixes available
debian/libextractor<=1:1.3-1, <=1:1.3-4, <=1:1.6-2
1:1.7-11:1.3-4+deb9u2
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
GNU Libextractor<=1.7
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Sep 4, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16430?
CVE-2018-16430 has a medium severity rating due to the potential for out-of-bounds read vulnerabilities that could be exploited.
2
How do I fix CVE-2018-16430?
To fix CVE-2018-16430, upgrade your version of libextractor to 1.8-2+deb10u1 or higher.
3
Which versions of libextractor are affected by CVE-2018-16430?
Versions of libextractor up to and including 1.7 are affected by CVE-2018-16430.
4
Is CVE-2018-16430 a remote or local vulnerability?
CVE-2018-16430 is considered a local vulnerability, as it requires access to the affected software's functionality.
5
Can CVE-2018-16430 be exploited in Debian Linux systems?
Yes, CVE-2018-16430 can be exploited on Debian Linux systems running affected versions of libextractor.