CVE-2019-15531
First published: Fri Aug 23 2019(Updated: )
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libextractor | <=1.9 | |
| Debian Linux | =8.0 | |
| Debian Linux | =9.0 | |
| Red Hat Fedora | =29 | |
| Red Hat Fedora | =30 | |
| Red Hat Fedora | =31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.gnunet.org/view.php?id=5846
- https://lists.debian.org/debian-lts-announce/2019/08/msg00038.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DV5YBIS2UUNUUKQOEKDWUKEEWJIKWFMZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GRQUHTSNOCKGRKPRXPUJ6FGTVZ2K5POL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MUJWNWDGGXQLTNQNELKERJ7DLW7E22BK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRQUHTSNOCKGRKPRXPUJ6FGTVZ2K5POL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MUJWNWDGGXQLTNQNELKERJ7DLW7E22BK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV5YBIS2UUNUUKQOEKDWUKEEWJIKWFMZ/
Frequently Asked Questions
What is the severity of CVE-2019-15531?
CVE-2019-15531 is considered a medium severity vulnerability due to the potential for heap-based buffer over-read.
How do I fix CVE-2019-15531?
To fix CVE-2019-15531, you should upgrade to a version of GNU Libextractor later than 1.9.
Which software versions are affected by CVE-2019-15531?
CVE-2019-15531 affects GNU Libextractor versions up to and including 1.9, as well as Debian Linux versions 8.0 and 9.0, and Fedora versions 29, 30, and 31.
What type of vulnerability is CVE-2019-15531?
CVE-2019-15531 is classified as a heap-based buffer over-read vulnerability.
Is CVE-2019-15531 exploitable?
Yes, CVE-2019-15531 can potentially be exploited by attackers to read sensitive memory content.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/libextractor
- version/libextractor/1.9
- vendor/debian
- canonical/debian linux
- version/debian linux/8.0
- version/debian linux/9.0
- vendor/fedoraproject
- canonical/red hat fedora
- version/red hat fedora/29
- version/red hat fedora/30
- version/red hat fedora/31