Lucene search

K
oraclelinuxOracleLinuxELSA-2020-1581
HistoryMay 05, 2020 - 12:00 a.m.

wavpack security update

2020-05-0500:00:00
linux.oracle.com
6

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

[5.1.0-15]

  • fix Out-of-bounds read in WavpackVerifySingleBlock function (#1663151)
  • CVE-2018-19841
    [5.1.0-14]
  • fix uninitialized variable in ParseCaffHeaderConfig (#1741251)
  • CVE-2019-1010317
    [5.1.0-13]
  • fortify parsing of .dff files (#1707428, #1733627)
  • CVE-2019-1010315
  • CVE-2019-11498
    [5.1.0-12]
  • fix possible infinite loop in WavpackPackInit function (#1663154)
  • CVE-2018-19840
    [5.1.0-11]
  • Fix issues with gating
    [5.1.0-10]
  • fix uninitialized variable in ParseWave64HeaderConfig (#1741200)
  • CVE-2019-1010319

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P