CVE-2018-20430: Medium severity libextractor vulnerability
Published Dec 24, 2018
·Updated
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract() in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c.
Affected Software
4 affected componentsFixes available
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
GNU Libextractor<=1.8
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Dec 24, 2018
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20430?
The severity of CVE-2018-20430 is moderate due to the potential for an out-of-bounds read vulnerability.
2
How do I fix CVE-2018-20430?
To fix CVE-2018-20430, update GNU Libextractor to versions 1:1.8-2+deb10u1, 1:1.11-2, 1:1.11-7, or 1:1.11-8.
3
Which versions of GNU Libextractor are affected by CVE-2018-20430?
GNU Libextractor versions up to and including 1.8 are affected by CVE-2018-20430.
4
What products are impacted by CVE-2018-20430?
CVE-2018-20430 affects GNU Libextractor running on Debian GNU/Linux versions 8.0 and 9.0.
5
What function is related to the vulnerability in CVE-2018-20430?
The vulnerability in CVE-2018-20430 is related to the function history_extract() in plugins/ole2_extractor.c.