Vulnerability Details CVE-2017-15600
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00004.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1501695
- https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00004.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1501695
- https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
Products affected by CVE-2017-15600
-
cpe:2.3:a:gnu:libextractor:1.4