Security Update for libextractor
Summary
DLA-1198-1: libextractor - security update. Affects libextractor versions < 1:0.6.3-5+deb7u1. Fixed in 1:0.6.3-5+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libextractor is a universal library and command-line tool used to obtain meta-data about files. It is vulnerable to several security issues, including NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors, and out-of-bounds read. These vulnerabilities can lead to a denial-of-service (application crash) or have other unspecified impacts.
Vulnerability Detail
The vulnerabilities in libextractor can be exploited to cause a denial-of-service or potentially have other impacts. The NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors, and out-of-bounds read can be triggered by maliciously crafted files. These vulnerabilities may allow an attacker to crash the application or execute arbitrary code.
How To Fix
Minimum fixed version
1:0.6.3-5+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libextractorTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
libextractor is vulnerable to multiple security issues, including NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors, and out-of-bounds read. Upgrading to version 1:0.6.3-5+deb7u1 or later is recommended to address these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libextractor →
FAQ
libextractor is a universal library and command-line tool used to obtain meta-data about files.
The vulnerabilities in libextractor include NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors, and out-of-bounds read.
These vulnerabilities can lead to a denial-of-service (application crash) or have other unspecified impacts. They may also allow an attacker to execute arbitrary code.
To fix these vulnerabilities, it is recommended to upgrade the libextractor package to version 1:0.6.3-5+deb7u1 or later.
No specific workaround has been mentioned for these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for libextractor.
