CVE-2018-7254

🗓️ 19 Feb 2018 23:00:00Reported by mitreType

The ParseCaffHeaderConfig function in WavPack 5.1.0 allows remote attackers to cause denial-of-service or trigger buffer overflow via a maliciously crafted CAF file

Reporter	Title	Published	Views	Family All 45
Packet Storm	Wavpack 5.1.0 Denial Of Service	23 Feb 201800:00	–	packetstorm
Prion	Buffer overflow	19 Feb 201823:29	–	prion
0day.today	Wavpack 5.1.0 - Denial of Service Exploit	21 Feb 201800:00	–	zdt
NVD	CVE-2018-7254	19 Feb 201823:29	–	nvd
RedhatCVE	CVE-2018-7254	21 Feb 201820:48	–	redhatcve
Veracode	Arbitrary Code Execution	10 May 202023:27	–	veracode
AlpineLinux	CVE-2018-7254	19 Feb 201823:29	–	alpinelinux
OSV	CVE-2018-7254	19 Feb 201823:29	–	osv
OSV	wavpack - security update	27 Feb 201800:00	–	osv
OSV	libwavpack1-32bit-5.4.0-1.6 on GA media	15 Jun 202400:00	–	osv

Source	Link
github	www.github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799e
exploit-db	www.exploit-db.com/exploits/44154/
usn	www.usn.ubuntu.com/3578-1/
github	www.github.com/dbry/WavPack/issues/26
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
debian	www.debian.org/security/2018/dsa-4125
packetstormsecurity	www.packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
seclists	www.seclists.org/bugtraq/2019/Dec/37

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Feb 2018 23:00Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.016