ALT-PU-2017-2450

Высокий

ALT-PU-2017-2450: package libextractor update to version 1.6-alt1

Источник

errata.altlinux.org

Дата публикации

17.10.2017

Дата обновления

17.10.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libextractor to version 1.6-alt1.

Устраненные уязвимости6

CVE-2017-15266

Средний 5.5

Дата публикации: 11.10.2017

CWE-369

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.

CVSS 3.0

Средний 5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack vector: Local
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2017-15266 https://nvd.nist.gov/vuln/detail/CVE-2017-15266

Ссылки1

ALT-PU-2017-2450 https://errata.altlinux.org/ALT-PU-2017-2450

Связанные уязвимости

CVE-2017-15266

CVSS3: 5.5

ubuntu

около 9 лет назад

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.

CVE-2017-15266

CVSS3: 5.5

nvd

около 9 лет назад

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.

CVE-2017-15266

CVSS3: 5.5

debian

около 9 лет назад

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_ex ...

GHSA-779v-r8gr-3gpc

CVSS3: 5.5

github

больше 4 лет назад

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.

CVE-2017-15267

CVSS3: 7.5

ubuntu

около 9 лет назад

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.