Lucene search
+L

769 matches found

RedHat Linux
RedHat Linux
added 2020/04/28 3:38 p.m.90 views

wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig caff.c:486. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

5.5CVSS5.7AI score0.01456EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:38 p.m.61 views

Low: Red Hat Security Advisory: wavpack security update

An update for wavpack is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

6.5CVSS6.2AI score0.03044EPSS
SaveExploits5References8
RedHat Linux
RedHat Linux
added 2020/04/28 3:38 p.m.11 views

wawpack: Infinite loop in WavpackPackInit function lead to DoS

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

5.5CVSS5.8AI score0.02304EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:38 p.m.14 views

wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig dsdiff.c:282. The attack vector is: Maliciously crafted .wav file. The fixed...

5.5CVSS5.7AI score0.01534EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:38 p.m.10 views

wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig wave64.c:211. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

5.5CVSS5.7AI score0.01503EPSS
SaveExploits1References4
OSV
OSV
added 2020/04/28 8:53 a.m.37 views

RLSA-2020:1581 Low: wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fixes: wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads ...

4.3CVSS6.2AI score0.03044EPSS
SaveExploits5References7
AlmaLinux
AlmaLinux
added 2020/04/28 8:53 a.m.38 views

Low: wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fixes: wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads ...

6.5CVSS1.6AI score0.03044EPSS
SaveExploits5References7
OSV
OSV
added 2020/04/28 8:53 a.m.36 views

ALSA-2020:1581 Low: wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fixes: wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads ...

6.5CVSS6.2AI score0.03044EPSS
SaveExploits5References7
RedhatCVE
RedhatCVE
added 2020/04/08 9:09 p.m.35 views

CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

5.5CVSS4.8AI score0.02304EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/04/08 5:18 a.m.40 views

CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

5.5CVSS5.8AI score0.02542EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/04/08 5:17 a.m.37 views

CVE-2019-11498

WavpackSetConfiguration64 in packutils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service application crash via a DFF file that lacks valid sample-rate data...

6.5CVSS4.8AI score0.03044EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2020/01/27 12:00 a.m.30 views

Fedora: Security Advisory for mingw-wavpack (FEDORA-2020-73274c9df4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.3AI score0.03044EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.33 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2122)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.03044EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2680)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.1AI score0.02304EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.33 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-1901)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.02304EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2095)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.01503EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2195)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.02123EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-1874)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.02304EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-1831)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.02542EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-2413)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.02123EPSS
SaveExploits1References2
Rows per page
Query Builder