CVE:CVE-2018-20430
CNNVD:CNNVD-201812-1080
GNU Libextractor是GNU计划开发的一套用于从文件中提取元数据的库。
GNU Libextractor 1.8及之前版本中的plugins/ole2_extractor.c文件的‘history_extract()’函数存在越界读取漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade gnu libextractor to a higher version than 1.8,and avoid the version (,1.8]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0