Lucene search

K
cve[email protected]CVE-2017-6834
HistoryMar 20, 2017 - 4:59 p.m.

CVE-2017-6834

2017-03-2016:59:02
CWE-119
web.nvd.nist.gov
154
2
cve-2017-6834
audio file library
g711.cpp
buffer overflow
denial of service

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

Affected configurations

NVD
Node
audiofileaudiofileMatch0.2.7
OR
audiofileaudiofileMatch0.3.0
OR
audiofileaudiofileMatch0.3.1
OR
audiofileaudiofileMatch0.3.2
OR
audiofileaudiofileMatch0.3.3
OR
audiofileaudiofileMatch0.3.4
OR
audiofileaudiofileMatch0.3.5
OR
audiofileaudiofileMatch0.3.6
Node
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0

Social References

More

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%