Lucene search
Veracode Vulnerability DatabaseVERACODE:7136HistoryJul 24, 2018 - 5:47 a.m.
Denial Of Service (DoS)
2018-07-2405:47:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.007 Low
EPSS
Percentile
80.6%
libaudiofile.so is vulnerable to denial of service (DoS). The vulnerability can be triggered by causing a heap-based buffer overflow in the Expand3To4Module::run function of SimpleModule.h by sending a malicious audio file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libaudiofile.so | eq | 1.0.0 |
References
www.debian.org/security/2017/dsa-3814
www.openwall.com/lists/oss-security/2017/03/13/8
blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/
blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/
github.com/mpruett/audiofile/blob/master/libaudiofile/modules/SimpleModule.h#L238
github.com/mpruett/audiofile/issues/40
github.com/mpruett/audiofile/pull/42
Related
prion
prion
Heap overflow
2017-03-20 16:59:00
nvd
nvd
CVE-2017-6836
2017-03-20 16:59:02
redhatcve
redhatcve
CVE-2017-6836
2017-03-16 12:48:55
cvelist
cvelist
CVE-2017-6836
2017-03-20 16:00:00
cbl_mariner
cbl_mariner
CVE-2017-6836 affecting package audiofile 0.3.6-27
2024-07-04 09:08:38
debiancve
debiancve
CVE-2017-6836
2017-03-20 16:59:02
cve
cve
CVE-2017-6836
2017-03-20 16:59:02
osv
osv
CVE-2017-6836
2017-03-20 16:59:02
audiofile - security update
2017-03-22 00:00:00
audiofile - security update
2017-03-23 00:00:00
ubuntucve
ubuntucve
CVE-2017-6836
2017-03-14 00:00:00
debian
debian
[SECURITY] [DLA 867-1] audiofile security update
2017-03-23 21:05:34
[SECURITY] [DSA 3814-1] audiofile security update
2017-03-22 20:13:14
[SECURITY] [DSA 3814-1] audiofile security update
2017-03-22 20:13:14
nessus
nessus
Debian DLA-867-1 : audiofile security update
2017-03-24 00:00:00
openSUSE Security Update : audiofile (openSUSE-2017-476)
2017-04-18 00:00:00
Ubuntu 14.04 LTS : audiofile vulnerabilities (USN-3241-1)
2017-03-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 3814-1 (audiofile - security update)
2017-03-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1182-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-867-1)
2018-01-11 00:00:00
mageia
mageia
Updated audiofile packages fix security vulnerabilities
2017-05-06 15:17:05
archlinux
archlinux
[ASA-201708-9] audiofile: multiple issues
2017-08-14 00:00:00
cloudfoundry
cloudfoundry
USN-3241-1: audiofile vulnerabilities | Cloud Foundry
2017-04-04 00:00:00
ubuntu
ubuntu
audiofile vulnerabilities
2017-03-22 00:00:00
oraclelinux
oraclelinux
audiofile security update
2020-10-06 00:00:00