Lucene search
Veracode Vulnerability DatabaseVERACODE:7146HistoryJul 24, 2018 - 8:53 a.m.
Denial Of Service (DoS)
2018-07-2408:53:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.005 Low
EPSS
Percentile
76.3%
libaudiofile.so is vulnerable to denial of service (DoS) attacks. An attacker can trigger the attack by sending a malicious WAV file to readValue function in FileHandle.cpp, causing a heap-based buffer overflow that can crash the application or execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libaudiofile.so | eq | 1.0.0 |
Related
cve
cve
CVE-2017-6828
2017-03-15 14:59:01
debiancve
debiancve
CVE-2017-6828
2017-03-15 14:59:01
osv
osv
CVE-2017-6828
2017-03-15 14:59:01
audiofile - security update
2017-03-22 00:00:00
audiofile - security update
2017-03-23 00:00:00
prion
prion
Heap overflow
2017-03-15 14:59:00
redhatcve
redhatcve
CVE-2017-6828
2017-03-16 12:49:42
cvelist
cvelist
CVE-2017-6828
2017-03-15 14:00:00
nvd
nvd
CVE-2017-6828
2017-03-15 14:59:01
cbl_mariner
cbl_mariner
CVE-2017-6828 affecting package audiofile 0.3.6-27
2024-07-04 09:08:38
ubuntucve
ubuntucve
CVE-2017-6828
2017-03-15 00:00:00
nessus
nessus
openSUSE Security Update : audiofile (openSUSE-2017-476)
2017-04-18 00:00:00
SUSE SLES11 Security Update : audiofile (SUSE-SU-2017:1182-1)
2017-05-08 00:00:00
Ubuntu 14.04 LTS : audiofile vulnerabilities (USN-3241-1)
2017-03-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 3814-1 (audiofile - security update)
2017-03-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1182-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-3241-1)
2017-03-23 00:00:00
mageia
mageia
Updated audiofile packages fix security vulnerabilities
2017-05-06 15:17:05
archlinux
archlinux
[ASA-201708-9] audiofile: multiple issues
2017-08-14 00:00:00
debian
debian
[SECURITY] [DSA 3814-1] audiofile security update
2017-03-22 20:13:14
[SECURITY] [DSA 3814-1] audiofile security update
2017-03-22 20:13:14
cloudfoundry
cloudfoundry
USN-3241-1: audiofile vulnerabilities | Cloud Foundry
2017-04-04 00:00:00
ubuntu
ubuntu
audiofile vulnerabilities
2017-03-22 00:00:00
oraclelinux
oraclelinux
audiofile security update
2020-10-06 00:00:00