Lucene search

CVE-2017-6888

🗓️ 25 Apr 2018 21:00:29Reported by flexeraType

An error in the "read_metadata_vorbiscomment_()" function in FLAC version 1.3.2 can cause memory leak via a specially crafted FLAC file

Reporter	Title	Published	Views	Family All 44
RedhatCVE	CVE-2017-6888	30 Apr 201805:29	–	redhatcve
Mageia	Updated flac packages fix security vulnerability	9 May 201821:33	–	mageia
Prion	Design/Logic Flaw	25 Apr 201821:29	–	prion
OpenVAS	Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-2327)	23 Jan 202000:00	–	openvas
OpenVAS	openSUSE: Security Advisory for flac (openSUSE-SU-2019:1225-1)	18 Apr 201900:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2018-0227)	28 Jan 202200:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2019:0920-1)	9 Jun 202100:00	–	openvas
OpenVAS	Fedora Update for flac FEDORA-2018-6a378e32c3	16 May 201800:00	–	openvas
OpenVAS	Fedora Update for flac FEDORA-2018-46f48df07d	16 May 201800:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2020-2052)	29 Sep 202000:00	–	openvas

Nvd

Node

flac_project flacRange≤1.3.2

Node

debian debian_linuxMatch9.0

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

[
  {
    "product": "FLAC",
    "vendor": "FLAC",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.2"
      }
    ]
  }
]

Source	Link
secuniaresearch	www.secuniaresearch.flexerasoftware.com/advisories/82639/
lists	www.lists.debian.org/debian-lts-announce/2021/01/msg00001.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/
secuniaresearch	www.secuniaresearch.flexerasoftware.com/secunia_research/2017-7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE/
git	www.git.xiph.org/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Apr 2018 21:29Current

5.3Medium risk

Vulners AI Score5.3

CVSS24.3

CVSS35.5

EPSS0.00085

CWE-772