Описание
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2019-15531
- https://bugs.gnunet.org/view.php?id=5846
- https://lists.debian.org/debian-lts-announce/2019/08/msg00038.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DV5YBIS2UUNUUKQOEKDWUKEEWJIKWFMZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GRQUHTSNOCKGRKPRXPUJ6FGTVZ2K5POL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MUJWNWDGGXQLTNQNELKERJ7DLW7E22BK
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 7 лет назад
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
CVSS3: 6.5
nvd
около 7 лет назад
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
CVSS3: 6.5
debian
около 7 лет назад
GNU Libextractor through 1.9 has a heap-based buffer over-read in the ...
CVSS3: 6.5
altlinux
больше 6 лет назад
ALT-PU-2020-2300: package `libextractor` update to version 1.10-alt1