CVE-2017-15602
CVE-2017-15602
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.
CVSS 7.5 · High · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libextractor Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.6-1
Update to 1:1.6-1
libextractor Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.6-1
Update to 1:1.6-1
libextractor Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.6-1
Update to 1:1.6-1
libextractor Ubuntu:Pro:14.04:LTS
- Versions
- 1:1.1-1ubuntu1
- 1:1.2-1ubuntu1
- 1:1.3-1
- 1:1.3-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libextractor Ubuntu:16.04:LTS
- Versions
- 1:1.3-2build1
- 1:1.3-2ubuntu1
- 1:1.3-3
- Affected ranges
- ECOSYSTEM: < 1:1.3-4+deb9u3build0.16.04.1
Update to 1:1.3-4+deb9u3build0.16.04.1