CVE-2015-7747

Опубликовано: 19 фев. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Средний

Описание

Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170387.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/10/06/2
Mailing List
Third Party Advisory
http://www.ubuntu.com/usn/USN-2787-1
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/audiofile/+bug/1502721
Third Party Advisory
https://github.com/ccrisan/motioneyeos/blob/master/package/audiofile/0008-CVE-2015-7747.patch
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2015/10/08/1
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170387.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/10/06/2
Mailing List
Third Party Advisory
http://www.ubuntu.com/usn/USN-2787-1
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/audiofile/+bug/1502721
Third Party Advisory
https://github.com/ccrisan/motioneyeos/blob/master/package/audiofile/0008-CVE-2015-7747.patch
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2015/10/08/1
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:audio_file_library_project:audio_file_library:*:*:*:*:*:*:*:*

Версия до 0.3.6 (исключая)

EPSS

Процентиль: 97%

0.40009

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2015-7747

CVSS3: 8.8

ubuntu

больше 5 лет назад

CVE-2015-7747

redhat

больше 9 лет назад

CVE-2015-7747

CVSS3: 8.8

msrc

11 месяцев назад

Описание отсутствует

CVE-2015-7747

CVSS3: 8.8

debian

больше 5 лет назад

Buffer overflow in the afReadFrames function in audiofile (aka libaudi ...

openSUSE-SU-2015:1903-1

suse-cvrf

больше 9 лет назад

Security update for audiofile

EPSS

Процентиль: 97%

0.40009

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120