Lucene search

K
osvGoogleOSV:USN-6558-1
HistoryDec 14, 2023 - 4:44 p.m.

audiofile vulnerabilities

2023-12-1416:44:57
Google
osv.dev
6
audiofile
ubuntu
lts
memory vulnerability
out of bounds
denial of service
execute arbitrary code
specially crafted file
cve-2018-13440
cve-2018-17095
cve-2019-13147
cve-2022-24599
leak memory
sensitive information

7.7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.0%

It was discovered that audiofile could be made to dereference invalid
memory. If a user or an automated system were tricked into opening a
specially crafted file, an attacker could possibly use this issue to cause
a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu
18.04 LTS. (CVE-2018-13440)

It was discovered that audiofile could be made to write out of bounds. If a
user or an automated system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. This issue only affected Ubuntu 16.04
LTS and Ubuntu 18.04 LTS. (CVE-2018-17095)

It was discovered that audiofile could be made to dereference invalid
memory. If a user or an automated system were tricked into opening a
specially crafted file, an attacker could possibly use this issue to cause
a denial of service. (CVE-2019-13147)

It was discovered that audiofile could be made to leak memory. If a user or
an automated system were tricked into opening a specially crafted file, an
attacker could possibly use this issue to obtain sensitive information.
(CVE-2022-24599)