Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-1010317
HistoryJul 11, 2019 - 8:15 p.m.

CVE-2019-1010317

2019-07-1120:15:12
CWE-908
CWE-457
[email protected]
web.nvd.nist.gov
7

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

58.6%

JSON

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.

Affected configurations

Nvd
Node
wavpackwavpackRange≤5.1.0
Node
fedoraprojectfedoraMatch29
OR
fedoraprojectfedoraMatch30
OR
fedoraprojectfedoraMatch31
Node
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.04
Node
debiandebian_linuxMatch9.0

Related

ubuntucve 1
veracode 1
redhatcve 1
cvelist 1
alpinelinux 1
debiancve 1
osv 4
cve 1
prion 1
nessus 12
openvas 9
fedora 4
cloudfoundry 1
ubuntu 1
mageia 2
almalinux 1
rocky 1
oraclelinux 1
redhat 1
debian 1
rosalinux 1
ubuntucve
ubuntucve
CVE-2019-1010317
2019-07-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-29 02:45:55
redhatcve
redhatcve
CVE-2019-1010317
2019-08-06 07:51:49
cvelist
cvelist
CVE-2019-1010317
2019-07-11 19:24:40
alpinelinux
alpinelinux
CVE-2019-1010317
2019-07-11 20:15:12
debiancve
debiancve
CVE-2019-1010317
2019-07-11 20:15:12
osv
osv
CVE-2019-1010317
2019-07-11 20:15:12
Low: wavpack security update
2020-04-28 08:53:05
Low: wavpack security update
2020-04-28 08:53:05
cve
cve
CVE-2019-1010317
2019-07-11 20:15:12
prion
prion
Design/Logic Flaw
2019-07-11 20:15:00
nessus
nessus
Fedora 29 : wavpack (2019-8eeb8f9d3f)
2019-09-04 00:00:00
EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2019-2095)
2019-09-30 00:00:00
Fedora 30 : wavpack (2019-c72f5f6361)
2019-09-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2095)
2020-01-23 00:00:00
Fedora Update for wavpack FEDORA-2019-c72f5f6361
2019-09-04 00:00:00
Mageia: Security Advisory (MGASA-2019-0231)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: wavpack-5.1.0-16.fc30
2019-09-03 12:32:43
[SECURITY] Fedora 29 Update: wavpack-5.1.0-16.fc29
2019-09-03 12:58:08
[SECURITY] Fedora 30 Update: mingw-wavpack-5.1.0-9.fc30
2020-01-15 00:15:00
cloudfoundry
cloudfoundry
USN-4062-1: WavPack vulnerabilities | Cloud Foundry
2019-08-29 00:00:00
ubuntu
ubuntu
WavPack vulnerabilities
2019-07-16 00:00:00
mageia
mageia
Updated wavpack packages fix security vulnerabilities
2019-08-31 16:22:36
Updated wavpack packages fix security vulnerabilities
2019-08-31 16:22:36
almalinux
almalinux
Low: wavpack security update
2020-04-28 08:53:05
rocky
rocky
wavpack security update
2020-04-28 08:53:05
oraclelinux
oraclelinux
wavpack security update
2020-05-05 00:00:00
redhat
redhat
(RHSA-2020:1581) Low: wavpack security update
2020-04-28 08:53:05
debian
debian
[SECURITY] [DLA 2525-1] wavpack security update
2021-01-15 10:28:51
rosalinux
rosalinux
Advisory ROSA-SA-2021-1995
2021-07-02 18:19:37

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

58.6%

JSON
Related for NVD:CVE-2019-1010317
ubuntucve1veracode1redhatcve1cvelist1alpinelinux1debiancve1osv4cve1prion1nessus12openvas9fedora4cloudfoundry1ubuntu1mageia2almalinux1rocky1oraclelinux1redhat1debian1rosalinux1