GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4641-1 advisory.

    It was discovered that Libextractor incorrectly handled zero sample rate. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-15266)

    It was discovered that Libextractor incorrectly handled certain FLAC metadata. An attacker could possibly     use this issue to cause a denial of service. (CVE-2017-15267)

    It was discovered that Libextractor incorrectly handled certain specially crafted files. An attacker could     possibly use this issue to cause a denial of service. (CVE-2017-15600, CVE-2018-16430, CVE-2018-20430)

    It was discovered that Libextractor incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-15601)

    It was discovered that Libextractor incorrectly handled integers. An attacker could possibly use this     issue to cause a denial of service. (CVE-2017-15602)

    It was discovered that Libextractore incorrectly handled certain crafted files. An attacker could possibly     use this issue to cause a denial of service. (CVE-2017-15922)

    It was discovered tha Libextractor incorrectly handled certain files. An attacker could possibly use this     issue to cause a denial of service. (CVE-2017-17440)

    It was discovered that Libextractor incorrectly handled certain malformed files. An attacker could     possibly use this issue to cause a denial of service. (CVE-2018-14346)

    It was discovered that Libextractor incorrectly handled malformed files. An attacker could possibly use     this issue to cause a denial of service. (CVE-2018-14347)

    It was discovered that Libextractor incorrectly handled metadata. An attacker could possibly use this     issue to cause a denial of service. (CVE-2018-20431)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in libextractor, a library to extract arbitrary meta-data from files, which may lead to denial of service or the execution of arbitrary code if a specially crafted file is opened.

It was discovered that there were two vulnerabilities in libextractor, a library to obtain metadata from files of arbitrary type.

  - A stack-based buffer overflow in unzip.c.
    (CVE-2018-14346)

  - An infinite loop vulnerability in mpeg_extractor.c.
    (CVE-2018-14347)

For Debian 8 'Jessie', these issues have been fixed in libextractor version 1:1.3-2+deb8u2.

We recommend that you upgrade your libextractor packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
143215	Ubuntu 16.04 LTS : libextractor vulnerabilities (USN-4641-1)	Nessus	Ubuntu Local Security Checks	high
117435	Debian DSA-4290-1 : libextractor - security update	Nessus	Debian Local Security Checks	high
112127	Debian DLA-1478-1 : libextractor security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-14346

high

Tenable Plugins

high

high

high