opusfile is vulnerable to Denial Of Service (DoS). The vulnerability exists through the null pointer dereference in the op_get_data
and op_open1
in opusfile.c
, allowing an attacker to cause an application crash
github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5
github.com/xiph/opusfile/issues/36
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ODIA6QRIRBNF2HRXOE5VCZ2AFP4ZB4R/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LIKBLOE433RA44YTYUZLED4IOWJG5DV/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ED4CWLBR2WQ2IXXTHZ24UYZBRNCLMJXH/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYPAQANM2ZNPXRBFOS5NFXNJ7O4Q3OBD/
lists.fedoraproject.org/archives/list/[email protected]/message/2ODIA6QRIRBNF2HRXOE5VCZ2AFP4ZB4R/
lists.fedoraproject.org/archives/list/[email protected]/message/4LIKBLOE433RA44YTYUZLED4IOWJG5DV/
lists.fedoraproject.org/archives/list/[email protected]/message/ED4CWLBR2WQ2IXXTHZ24UYZBRNCLMJXH/
lists.fedoraproject.org/archives/list/[email protected]/message/MYPAQANM2ZNPXRBFOS5NFXNJ7O4Q3OBD/
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
secdb.alpinelinux.org/v3.16/main.yaml
secdb.alpinelinux.org/v3.17/main.yaml