CVE-2018-10537

Опубликовано: 29 апр. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks.

Ссылки

http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
https://github.com/dbry/WavPack/commit/26cb47f99d481ad9b93eeff80d26e6b63bbd7e15
Patch
Third Party Advisory
https://github.com/dbry/WavPack/issues/30
Issue Tracking
Third Party Advisory
https://github.com/dbry/WavPack/issues/31
Issue Tracking
Third Party Advisory
https://github.com/dbry/WavPack/issues/32
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
https://seclists.org/bugtraq/2019/Dec/37
https://usn.ubuntu.com/3637-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4197
Third Party Advisory
http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
https://github.com/dbry/WavPack/commit/26cb47f99d481ad9b93eeff80d26e6b63bbd7e15
Patch
Third Party Advisory
https://github.com/dbry/WavPack/issues/30
Issue Tracking
Third Party Advisory
https://github.com/dbry/WavPack/issues/31
Issue Tracking
Third Party Advisory
https://github.com/dbry/WavPack/issues/32
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
https://seclists.org/bugtraq/2019/Dec/37
https://usn.ubuntu.com/3637-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4197
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*

Версия до 5.1.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00962

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2018-10537

CVSS3: 7.8

ubuntu

почти 8 лет назад

CVE-2018-10537

CVSS3: 7.8

redhat

почти 8 лет назад

CVE-2018-10537

CVSS3: 7.8

debian

почти 8 лет назад

An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser c ...

GHSA-h93h-48cq-mpcw

CVSS3: 7.8

github

больше 3 лет назад

openSUSE-SU-2021:0154-1

suse-cvrf

около 5 лет назад

Security update for wavpack

EPSS

Процентиль: 76%

0.00962

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119