rpm package
suse/soundtouch&distro=SUSE Linux Enterprise Server 12 SP3
pkg:rpm/suse/soundtouch&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-17098 | Hig | 8.8 | < 1.7.1-5.6.1 | 1.7.1-5.6.1 | Sep 16, 2018 | The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. | |
| CVE-2018-17097 | Hig | 8.8 | < 1.7.1-5.6.1 | 1.7.1-5.6.1 | Sep 16, 2018 | The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. | |
| CVE-2018-17096 | Med | 6.5 | < 1.7.1-5.6.1 | 1.7.1-5.6.1 | Sep 16, 2018 | The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. | |
| CVE-2018-1000223 | Hig | 8.8 | < 1.7.1-5.3.1 | 1.7.1-5.3.1 | Aug 20, 2018 | soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch uti |
- affected < 1.7.1-5.6.1fixed 1.7.1-5.6.1
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.
- affected < 1.7.1-5.6.1fixed 1.7.1-5.6.1
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.
- affected < 1.7.1-5.6.1fixed 1.7.1-5.6.1
The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
- affected < 1.7.1-5.3.1fixed 1.7.1-5.3.1
soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch uti