ALT-PU-2018-2714-1
Package libextractor updated to version 1.8-alt1 for branch sisyphus in task 217031.
Closed vulnerabilities
Published: 2018-07-20
BDU:2018-01561
Уязвимость метода EXTRACTOR_zip_extract_method() библиотеки GNU Libextractor, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Severity: HIGH (8.8)
Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: CRITICAL (9.3)
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
Published: 2018-09-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-16430
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
Severity: MEDIUM (6.8)
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Severity: HIGH (8.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
- http://www.securityfocus.com/bid/105254
- https://gnunet.org/bugs/view.php?id=5405
- https://gnunet.org/git/libextractor.git/commit/?id=24c8d489797499c0331f4d1039e357ece1ae98a7
- https://lists.debian.org/debian-lts-announce/2018/09/msg00011.html
- https://www.debian.org/security/2018/dsa-4290
- http://www.securityfocus.com/bid/105254
- https://gnunet.org/bugs/view.php?id=5405
- https://gnunet.org/git/libextractor.git/commit/?id=24c8d489797499c0331f4d1039e357ece1ae98a7
- https://lists.debian.org/debian-lts-announce/2018/09/msg00011.html
- https://www.debian.org/security/2018/dsa-4290