Lucene search

Arbitrary Code Execution

🗓️ 01 Oct 2020 03:20:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

audiofile vulnerable to arbitrary code executio

Reporter	Title	Published	Views	Family All 63
Tenable Nessus	openSUSE Security Update : audiofile (openSUSE-2018-1375)	11 Nov 201800:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : audiofile (SUSE-SU-2018:3588-2)	11 Dec 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : audiofile (openSUSE-2018-1325)	29 Oct 201800:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : audiofile (SUSE-SU-2018:3506-1)	2 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : audiofile (openSUSE-2019-879)	27 Mar 201900:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : audiofile (SUSE-SU-2018:3588-1)	1 Nov 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : audiofile (EulerOS-SA-2020-1835)	28 Aug 202000:00	–	nessus
Tenable Nessus	Fedora 28 : 1:audiofile (2018-41626fa774)	3 Jan 201900:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : audiofile on SL7.x x86_64 (20201001)	21 Oct 202000:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS : audiofile vulnerabilities (USN-3800-1)	25 Oct 201800:00	–	nessus

Vulners

Node

audiofile audiofileMatch0.3.6_4.el7

Source	Link
access	www.access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
access	www.access.redhat.com/errata/RHSA-2020:3877
access	www.access.redhat.com/security/updates/classification/
github	www.github.com/mpruett/audiofile/issues/50
github	www.github.com/mpruett/audiofile/issues/51
usn	www.usn.ubuntu.com/3800-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Oct 2020 03:50Current

4.4Medium risk

Vulners AI Score4.4

EPSS0.007

audiofile vulnerability buffer overflow sfconvert host os attack software