PatchTheCVEfreexl vulnerabilities and fixes
Recent CVEs affecting freexl, with upgrade or downgrade steps. 7 tracked.
freexl has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-04-24. Highest priority: CVE-2018-7439 (score 61/100).
- CVE-2018-7439 HIGH 8.8 UPGRADE MITIGATE An issue was discovered in FreeXL before 1.0.5
- CVE-2018-7438 HIGH 8.8 UPGRADE MITIGATE An issue was discovered in FreeXL before 1.0.5
- CVE-2018-7437 HIGH 8.8 UPGRADE MITIGATE An issue was discovered in FreeXL before 1.0.5
- CVE-2018-7436 HIGH 8.8 UPGRADE MITIGATE An issue was discovered in FreeXL before 1.0.5
- CVE-2018-7435 HIGH 8.8 UPGRADE MITIGATE An issue was discovered in FreeXL before 1.0.5
- CVE-2017-2924 HIGH 8.8 DOWNGRADE MITIGATE An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.
- CVE-2017-2923 HIGH 8.8 DOWNGRADE MITIGATE An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of Free
FAQ
How do I fix freexl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is freexl being exploited right now?
None of the tracked freexl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which freexl CVE should I patch first?
CVE-2018-7439 currently ranks highest (61/100): An issue was discovered in FreeXL before 1.0.5.