PT-2017-3184 · Bchunk+1 · Bchunk+1
Wen Bin
·
Publicado
2017-09-09
·
Atualizado
2024-08-19
·
CVE-2017-15954
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
bchunk versions 1.2.0 through 1.2.1
Description
The issue is related to a heap-based buffer overflow that can cause a crash when processing a malformed CUE (.cue) file. This can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial-of-service condition.
Recommendations
For versions 1.2.0 and 1.2.1, update to a version that fixes the heap-based buffer overflow issue to prevent potential crashes when processing malformed CUE files.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Bchunk