CVE-2018-20431: Null Pointer Dereference
Published Dec 24, 2018
·Updated
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata() in plugins/ole2extractor.c.
Affected Software
4 affected componentsFixes available
debian/libextractor
1:1.8-2+deb10u11:1.11-21:1.11-71:1.11-8
GNU Libextractor<=1.8
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Dec 24, 2018
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20431?
CVE-2018-20431 is classified as a NULL Pointer Dereference vulnerability with the potential to cause application crashes.
2
How do I fix CVE-2018-20431?
To resolve CVE-2018-20431, upgrade to libextractor versions 1:1.8-2+deb10u1, 1:1.11-2, 1:1.11-7, or 1:1.11-8.
3
Which versions of libextractor are affected by CVE-2018-20431?
CVE-2018-20431 affects libextractor versions up to and including 1.8.
4
What impact does CVE-2018-20431 have on systems?
CVE-2018-20431 can cause crashes in applications using affected versions of libextractor when processing certain metadata.
5
Is there a public exploit for CVE-2018-20431?
There is currently no known public exploit for CVE-2018-20431, but the vulnerability is still considered critical to address.