PT-2018-17724 · Wavpack+3 · Wavpack+3

Joonun Jang

·

Publicado

2018-02-06

·

Atualizado

2024-06-15

·

CVE-2018-6767

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WavPack version 5.1.0
Description A stack-based buffer over-read issue in the ParseRiffHeaderConfig function of the cli/riff.c file allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file.
Recommendations For WavPack version 5.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2020-1107
ALT-PU-2020-2916
ALT-PU-2023-1392
CVE-2018-6767
DSA-4125-1
MGASA-2019-0045
OPENSUSE-SU-2021:0153-1
OPENSUSE-SU-2021:0154-1
OPENSUSE-SU-2021_0153-1
OPENSUSE-SU-2021_0154-1
OPENSUSE-SU-2024:11505-1
SUSE-SU-2021:0186-1
USN-3568-1

Produtos afetados

Alt Linux
Suse
Ubuntu
Wavpack