PT-2018-17984 · Underbit+4 · Libmad+4

Moritz Muehlenhoff · Published 2018-02-20 · Updated 2020-04-28 · CVE-2018-7263

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libmad versions prior to 0.15.1b

Description The issue is related to the mad decoder run() function in decoder.c, which allows remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted file. This could result in a SIGABRT due to double free or corruption.

Recommendations For versions prior to 0.15.1b, consider disabling the mad decoder run() function as a temporary workaround until a patch is available. Restrict access to crafted files to minimize the risk of exploitation.

Fix

DoS

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALSA-2020:1631

CESA-2020_1631

CVE-2018-7263

MGASA-2019-0078

RHSA-2020:1631

RHSA-2020_1631

RLSA-2020:1631

Affected Products

Almalinux

Centos

Red Hat

Rocky Linux

Libmad

References · 26

• https://osv.dev/vulnerability/ALSA-2020:1631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7263 · Security Note
• https://osv.dev/vulnerability/RLSA-2020:1631 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7263 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7263 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/CCLUAGAEWOQKRY2C6HLTXT5WWTWSTNIP · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2020-1631.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-7263 · Security Note
• https://ubuntu.com/security/CVE-2018-7263 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0078 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0078.html · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2018-7263 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2020:1631 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1547504 · Note
• https://bugs.debian.org/870608 · Note