Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-13440

Опубликовано: 08 июл. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 90%
0.06018
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

CVSS3: 5.3
redhat
больше 7 лет назад

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

CVSS3: 6.5
debian
больше 7 лет назад

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference ...

suse-cvrf
почти 7 лет назад

Security update for audiofile

suse-cvrf
больше 5 лет назад

Security update for audiofile

EPSS

Процентиль: 90%
0.06018
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476