Vulnerability Details CVE-2017-15267
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html
- http://openwall.com/lists/oss-security/2017/10/11/1
- http://www.securityfocus.com/bid/101272
- https://bugzilla.redhat.com/show_bug.cgi?id=1499600
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html
- http://openwall.com/lists/oss-security/2017/10/11/1
- http://www.securityfocus.com/bid/101272
- https://bugzilla.redhat.com/show_bug.cgi?id=1499600
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
Products affected by CVE-2017-15267
-
cpe:2.3:a:gnu:libextractor:1.4