CVE-2019-15531: Medium severity libextractor vulnerability
Published Aug 23, 2019
·Updated
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c.
Affected Software
6 affected components
GNU Libextractor<=1.9
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Fedoraproject Fedora=29
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Event History
Aug 23, 2019
CVE Published
via MITRE·04:03 PM
Data Sourced
via MITRE·04:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15531?
CVE-2019-15531 is considered a medium severity vulnerability due to the potential for heap-based buffer over-read.
2
How do I fix CVE-2019-15531?
To fix CVE-2019-15531, you should upgrade to a version of GNU Libextractor later than 1.9.
3
Which software versions are affected by CVE-2019-15531?
CVE-2019-15531 affects GNU Libextractor versions up to and including 1.9, as well as Debian Linux versions 8.0 and 9.0, and Fedora versions 29, 30, and 31.
4
What type of vulnerability is CVE-2019-15531?
CVE-2019-15531 is classified as a heap-based buffer over-read vulnerability.
5
Is CVE-2019-15531 exploitable?
Yes, CVE-2019-15531 can potentially be exploited by attackers to read sensitive memory content.