Lucene search

K
freebsdFreeBSDB48E7B14-052A-11EA-A1DE-53B029D2B061
HistoryApr 30, 2017 - 12:00 a.m.

libmad -- multiple vulnerabilities

2017-04-3000:00:00
vuxml.freebsd.org
9

0.006 Low

EPSS

Percentile

78.4%

National Vulnerability Database:

CVE-2017-8372: The mad_layer_III function in layer3.c in Underbit MAD
libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a
denial of service (assertion failure and application exit) via a crafted
audio file.

CVE-2017-8373: The mad_layer_III function in layer3.c in Underbit MAD
libmad 0.15.1b allows remote attackers to cause a denial of service
(heap-based buffer overflow and application crash) or possibly have
unspecified other impact via a crafted audio file.

CVE-2017-8374: The mad_bit_skip function in bit.c in Underbit MAD
libmad 0.15.1b allows remote attackers to cause a denial of service
(heap-based buffer over-read and application crash) via a crafted audio
file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibmad< 0.15.1b_7UNKNOWN

0.006 Low

EPSS

Percentile

78.4%