CVE-2017-11547

The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows
remote attackers to cause a denial of service (heap-based buffer over-read)
via a crafted mid file. NOTE: a crash might be relevant when using the
–background option. NOTE: the TiMidity++ README.alsaseq documentation
suggests a setuid-root installation.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870338&gt;