Debian/libextractor: medium 6.5

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.

Action: Upgrade libextractor to 1:1.8-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2018-20431#Debian:13/libextractor
• https://security-tracker.debian.org/tracker/CVE-2018-20431

published 2018-12-24T05:29:01.600Z · modified 2026-10-23T18:03:56.786835159Z · JSON