Vulnerability Details CVE-2017-15922
In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00008.html
- http://www.securityfocus.com/bid/101595
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00008.html
- http://www.securityfocus.com/bid/101595
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
Products affected by CVE-2017-15922
-
cpe:2.3:a:gnu:libextractor:1.4