CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c…

published October 18, 2017

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01514 · 74.1th percentile
Published
2017-10-18T21:00Z
EPSS history
Timeline
  • 18 OCT 21:00Z
    In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c…
    cvelistv5