CVE-2017-2923: Debian Linux

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Freexl Project Freexl: version 1.0.3 only

Published 2018-04-24. Last modified 2026-06-17.