oss-sec mailing list archives

CVE request: Two DoS vulneribilities in libextractor


From: Leon Zhao <leon.zhao.7 () gmail com>
Date: Wed, 11 Oct 2017 11:40:33 +0800

Hello oss security,

I found two DoS vulneribilities in libextractor,

Affected version
1.4

1. Divide-By-Zero
https://bugzilla.redhat.com/show_bug.cgi?id=1499599
http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html
Fixed

2. Null Pointer Dereference
https://bugzilla.redhat.com/show_bug.cgi?id=1499600
http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html
Fixed


Best regards

Zhao Liang, Huawei Weiran Labs

Current thread: