What’s Vulnerable › Vulnerabilities
CVE-2018-16430
- Severity: high (CVSS 8.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-09-04 · updated 2026-06-17
- Weakness: CWE-125
Description
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
Affected products
- Debian Linux: 8.0, 9.0
- GNU libextractor: through 1.7
References
- http://www.securityfocus.com/bid/105254
- https://gnunet.org/bugs/view.php?id=5405
- https://gnunet.org/git/libextractor.git/commit/?id=24c8d489797499c0331f4d1039e357ece1ae98a7
- https://lists.debian.org/debian-lts-announce/2018/09/msg00011.html
- https://www.debian.org/security/2018/dsa-4290
- http://www.securityfocus.com/bid/105254
- https://gnunet.org/bugs/view.php?id=5405
- https://gnunet.org/git/libextractor.git/commit/?id=24c8d489797499c0331f4d1039e357ece1ae98a7
- https://lists.debian.org/debian-lts-announce/2018/09/msg00011.html
- https://www.debian.org/security/2018/dsa-4290
Get alerted when CVE-2018-16430 or the next vulnerability affects your stack