rpm package
opensuse/mp3gain&distro=openSUSE Leap 15.1
pkg:rpm/opensuse/mp3gain&distro=openSUSE%20Leap%2015.1
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-18359 | Med | 5.5 | < 1.6.2-lp151.3.3.1 | 1.6.2-lp151.3.3.1 | Oct 23, 2019 | A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. | |
| CVE-2017-12911 | Med | 5.5 | < 1.6.2-lp151.3.3.1 | 1.6.2-lp151.3.3.1 | Sep 7, 2017 | The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. |
- affected < 1.6.2-lp151.3.3.1fixed 1.6.2-lp151.3.3.1
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.
- affected < 1.6.2-lp151.3.3.1fixed 1.6.2-lp151.3.3.1
The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.