rpm package
suse/mp3gain&distro=SUSE Package Hub 15 SP1
pkg:rpm/suse/mp3gain&distro=SUSE%20Package%20Hub%2015%20SP1
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-18359 | Med | 5.5 | < 1.6.2-bp151.4.3.1 | 1.6.2-bp151.4.3.1 | Oct 23, 2019 | A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. | |
| CVE-2017-12911 | Med | 5.5 | < 1.6.2-bp151.4.3.1 | 1.6.2-bp151.4.3.1 | Sep 7, 2017 | The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. |
- affected < 1.6.2-bp151.4.3.1fixed 1.6.2-bp151.4.3.1
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.
- affected < 1.6.2-bp151.4.3.1fixed 1.6.2-bp151.4.3.1
The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.