Lucene search
+L

1344 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.9 views

The vulnerability of the III_Afficantize_sample function in the audio encoding application LAME, related to the operation leaving the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of the IIIAfficantizesample function in the audio encoding application LAME is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially created audio file...

7.8CVSS7.8AI score0.0979EPSS
SaveExploits1References6Affected Software2
OSV
OSV
added 2019/04/24 5:29 a.m.1 views

DEBIAN-CVE-2019-11498

WavpackSetConfiguration64 in packutils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service application crash via a DFF file that lacks valid sample-rate data...

6.5CVSS5.6AI score0.03044EPSS
SaveExploits1References1
Veracode
Veracode
added 2019/03/07 6:59 a.m.14 views

Denial Of Service (DoS)

aubio is vulnerable to denial of service DoS. It does not properly handle invalid newaubioonset parameter and crashes when a malicious audio file is processed...

7.5CVSS7.2AI score0.0226EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2019/03/07 6:43 a.m.18 views

Denial Of Service (DoS)

aubio is vulnerable to denial of service DoS. Failure to handle invalid filter table height parameter nfilters causes an application crash when a malicious audio file is input to newaubiofilterbank...

7.5CVSS1.3AI score0.02058EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2019/03/06 9:20 a.m.16 views

Denial Of Service (DoS)

aubio is vulnerable to denial of service DoS attack. The attack exists when a malicious audio file is input to the tempo.c, causing an application crash...

9.8CVSS8.8AI score0.02214EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/02/15 12:0 a.m.31 views

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2019-1030)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application cra...

8.8CVSS8.1AI score0.03574EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/02/15 12:0 a.m.81 views

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-1029)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application...

8.8CVSS7.7AI score0.03902EPSS
SaveExploits1References6
CNVD
CNVD
added 2019/02/11 12:0 a.m.4 views

SDL (Simple DirectMedia Layer) Buffer Overflow Vulnerability (CNVD-2019-29169)

Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A heap-based buffer overflow vulnerability exists in the 'IMAADPCMdecode' function of the audio/SDLwave.c file in SDL versions prior to...

8.8CVSS9.8AI score0.02955EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/07 7:29 a.m.3 views

ALPINE-CVE-2019-7574

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c...

8.8CVSS7.2AI score0.02806EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2019/02/07 12:0 a.m.45 views

CVE-2019-7577

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...

8.8CVSS9.1AI score0.02992EPSS
SaveExploits1
Veracode
Veracode
added 2019/01/15 9:22 a.m.45 views

Denial Of Service (DoS) Through Out-of-Bounds Write

libvorbis.so is vulnerable to out-of-bounds write. A malicious user can pass a audio file that when processed causes a out-of-bounds write that can lead to arbitrary code execution or to the application crashing...

8.8CVSS8.6AI score0.12054EPSS
SaveExploits0References22Affected Software3
Veracode
Veracode
added 2019/01/15 9:5 a.m.26 views

Arbitrary Code Execution

flac is vulnerable to arbitrary code execution. A stack-based buffer overflow in streamdecoder.c allows an attacker to pass a malicious FLAC audio file to execute arbitrary code or crash the process when the file is read...

7.5CVSS7.5AI score0.0986EPSS
SaveExploits0References16Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/12/28 12:0 a.m.45 views

EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2018-1447)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application cra...

8.8CVSS8.1AI score0.03574EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/12/27 12:0 a.m.21 views

Debian: Security Advisory (DLA-1618-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.03902EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2018/12/27 12:0 a.m.36 views

Debian DLA-1618-1 : libsndfile security update

Multiple vulnerabilities have been found in libsndfile, the library for reading and writing files containing sampled sound. CVE-2017-8361 The flacbuffercopy function flac.c is affected by a buffer overflow. This vulnerability might be leveraged by remote attackers to cause a denial of service, or...

8.8CVSS6.8AI score0.03902EPSS
SaveExploits3References15
OSV
OSV
added 2018/12/04 9:29 a.m.6 views

ALPINE-CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

5.5CVSS6.7AI score0.02542EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/04 9:29 a.m.28 views

CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

5.5CVSS6.3AI score
SaveExploits0References13
Prion
Prion
added 2018/12/04 9:29 a.m.21 views

Code injection

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

4.3CVSS5.5AI score0.02304EPSS
SaveExploits0References13Affected Software4
OSV
OSV
added 2018/12/04 9:29 a.m.26 views

CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

5.5CVSS6.4AI score
SaveExploits0References13
Cvelist
Cvelist
added 2018/12/04 9:0 a.m.34 views

CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

5.7AI score0.02542EPSS
SaveExploits1References13
Rows per page
Query Builder