Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-18781

Опубликовано: 22 авг. 2023
Источник: debian
EPSS Низкий

Описание

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
audiofilefixed0.3.6-4package

Примечания

  • https://github.com/mpruett/audiofile/issues/56

  • https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0

EPSS

Процентиль: 8%
0.00029
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CVSS3: 5.5
redhat
больше 2 лет назад

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CVSS3: 5.5
nvd
больше 2 лет назад

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CVSS3: 5.5
github
больше 2 лет назад

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

EPSS

Процентиль: 8%
0.00029
Низкий