Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-17095

Опубликовано: 16 сент. 2018
Источник: redhat
CVSS3: 7
EPSS Средний

Описание

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5audiofileWill not fix
Red Hat Enterprise Linux 6audiofileWill not fix
Red Hat Enterprise Linux 7audiofileFixedRHSA-2020:387729.09.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1631088audiofile: Heap-based buffer overflow in Expand3To4Module::run() when running sfconvert

EPSS

Процентиль: 94%
0.12531
Средний

7 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

CVSS3: 8.8
nvd
больше 7 лет назад

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

CVSS3: 8.8
debian
больше 7 лет назад

An issue has been discovered in mpruett Audio File Library (aka audiof ...

suse-cvrf
около 7 лет назад

Security update for audiofile

suse-cvrf
больше 7 лет назад

Security update for audiofile

EPSS

Процентиль: 94%
0.12531
Средний

7 High

CVSS3