PT-2018-3708 · Wavpack+7 · Wavpack+7

Hongxuchen · Publicado 2018-11-29 · Atualizado 2024-06-15 · CVE-2018-19841

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WavPack versions through 5.1.0

Description The issue is related to the WavpackVerifySingleBlock function in the open utils.c component of the WavPack audio codec, which is associated with an out-of-bounds read of data buffer. This can be exploited by a remote attacker using a specially crafted WavPack lossless audio file, leading to a denial-of-service (application crash).

Recommendations For versions through 5.1.0, consider updating to a version that contains a fix for this issue, as using a specially crafted WavPack file can cause an application crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALSA-2020:1581

ALT-PU-2020-1107

ALT-PU-2020-2916

ALT-PU-2023-1392

BDU:2021-03455

CESA-2020_1581

CVE-2018-19841

DLA-2525-1

MGASA-2019-0045

OPENSUSE-SU-2019:1145-1

OPENSUSE-SU-2019_1145-1

OPENSUSE-SU-2021:0153-1

OPENSUSE-SU-2021:0154-1

OPENSUSE-SU-2021_0153-1

OPENSUSE-SU-2021_0154-1

OPENSUSE-SU-2024:11505-1

RHSA-2020:1581

RHSA-2020_1581

RLSA-2020:1581

SUSE-SU-2019:0772-1

SUSE-SU-2021:0186-1

USN-3839-1

Produtos afetados

Alt Linux

Almalinux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Wavpack

Referências · 91

• 🔥 https://github.com/dbry/WavPack/issues/54 · Exploit
• https://github.com/dbry/WavPack/commit/bba5389dc598a92bdf2b297c3ea34620b6679b5b · Correção
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-19840 · Aviso do Fabricante
• https://bugzilla.suse.com/1091341 · Nota
• https://ubuntu.com/security/CVE-2018-19841 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1737740 · Nota
• https://suse.com/security/cve/CVE-2019-11498 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19841 · Nota de Segurança
• https://bugzilla.suse.com/1120929 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1661448 · Nota
• https://osv.dev/vulnerability/DLA-2525-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-1010319 · Nota
• https://security.gentoo.org/glsa/202007-19 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-6767 · Nota