Описание
Security update for wavpack
This update for wavpack fixes the following issues:
- CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172: Make sure upper and lower boundaries make sense, to avoid out of bounds memory reads that could lead to crashes or disclosing memory. (bsc#1021483)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Desktop 12 SP3
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP2
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP3
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2
wavpack-4.60.99-5.3.1
wavpack-devel-4.60.99-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
wavpack-4.60.99-5.3.1
wavpack-devel-4.60.99-5.3.1
Ссылки
- Link for SUSE-SU-2018:0608-1
- E-Mail link for SUSE-SU-2018:0608-1
- SUSE Security Ratings
- SUSE Bug 1021483
- SUSE CVE CVE-2016-10169 page
- SUSE CVE CVE-2016-10170 page
- SUSE CVE CVE-2016-10171 page
- SUSE CVE CVE-2016-10172 page
Описание
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Desktop 12 SP3:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP3:libwavpack1-4.60.99-5.3.1
Ссылки
- CVE-2016-10169
- SUSE Bug 1021483
Описание
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Desktop 12 SP3:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP3:libwavpack1-4.60.99-5.3.1
Ссылки
- CVE-2016-10170
- SUSE Bug 1021483
Описание
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Desktop 12 SP3:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP3:libwavpack1-4.60.99-5.3.1
Ссылки
- CVE-2016-10171
- SUSE Bug 1021483
Описание
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Desktop 12 SP3:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP2:libwavpack1-4.60.99-5.3.1
SUSE Linux Enterprise Server 12 SP3:libwavpack1-4.60.99-5.3.1
Ссылки
- CVE-2016-10172
- SUSE Bug 1021483