In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method     function in plugins/png_extractor.c, related to processiTXt and stndup. (CVE-2017-15601)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4641-1 advisory.

    It was discovered that Libextractor incorrectly handled zero sample rate. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-15266)

    It was discovered that Libextractor incorrectly handled certain FLAC metadata. An attacker could possibly     use this issue to cause a denial of service. (CVE-2017-15267)

    It was discovered that Libextractor incorrectly handled certain specially crafted files. An attacker could     possibly use this issue to cause a denial of service. (CVE-2017-15600, CVE-2018-16430, CVE-2018-20430)

    It was discovered that Libextractor incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-15601)

    It was discovered that Libextractor incorrectly handled integers. An attacker could possibly use this     issue to cause a denial of service. (CVE-2017-15602)

    It was discovered that Libextractore incorrectly handled certain crafted files. An attacker could possibly     use this issue to cause a denial of service. (CVE-2017-15922)

    It was discovered tha Libextractor incorrectly handled certain files. An attacker could possibly use this     issue to cause a denial of service. (CVE-2017-17440)

    It was discovered that Libextractor incorrectly handled certain malformed files. An attacker could     possibly use this issue to cause a denial of service. (CVE-2018-14346)

    It was discovered that Libextractor incorrectly handled malformed files. An attacker could possibly use     this issue to cause a denial of service. (CVE-2018-14347)

    It was discovered that Libextractor incorrectly handled metadata. An attacker could possibly use this     issue to cause a denial of service. (CVE-2018-20431)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Leon Zhao discovered several security vulnerabilities in libextractor, a universal library and command-line tool to obtain meta-data about files. NULL pointer Dereferences, heap-based buffer overflows, integer signedness errors and out-of-bounds read may lead to a denial of service (application crash) or have other unspecified impact.

For Debian 7 'Wheezy', these problems have been fixed in version 1:0.6.3-5+deb7u1.

We recommend that you upgrade your libextractor packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
253885	Linux Distros Unpatched Vulnerability : CVE-2017-15601	Nessus	Misc.	high
143215	Ubuntu 16.04 LTS : libextractor vulnerabilities (USN-4641-1)	Nessus	Ubuntu Local Security Checks	high
105009	Debian DLA-1198-1 : libextractor security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-15601

high

Tenable Plugins

high

high

high