PRIOn knowledge basePRION:CVE-2015-7747

HistoryFeb 19, 2020 - 9:15 p.m.

Buffer overflow

2020-02-1921:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.8%

JSON

Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.

CPENameOperatorVersion
audio_file_librarylt0.3.6
ubuntu_linuxeq12.04
ubuntu_linuxeq15.10
ubuntu_linuxeq14.04
ubuntu_linuxeq15.04
fedoraeq23

Name	Operator	Version
audio_file_library	lt	0.3.6
ubuntu_linux	eq	12.04
ubuntu_linux	eq	15.10
ubuntu_linux	eq	14.04
ubuntu_linux	eq	15.04
fedora	eq	23

References

www.openwall.com/lists/oss-security/2015/10/06/2

www.ubuntu.com/usn/USN-2787-1

bugs.launchpad.net/ubuntu/+source/audiofile/+bug/1502721

github.com/ccrisan/motioneyeos/blob/master/package/audiofile/0008-CVE-2015-7747.patch

lists.fedoraproject.org/pipermail/package-announce/2015-November/170387.html

www.openwall.com/lists/oss-security/2015/10/08/1