rpm package
suse/wavpack&distro=SUSE Linux Enterprise Server 11 SP4
pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-19840 | — | < 4.50.1-1.30.1 | 4.50.1-1.30.1 | Dec 4, 2018 | The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero. | ||
| CVE-2016-10172 | Med | 5.5 | < 4.50.1-1.27.1 | 4.50.1-1.27.1 | Mar 14, 2017 | The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10171 | Med | 5.5 | < 4.50.1-1.27.1 | 4.50.1-1.27.1 | Mar 14, 2017 | The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10170 | Med | 5.5 | < 4.50.1-1.27.1 | 4.50.1-1.27.1 | Mar 14, 2017 | The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10169 | Med | 5.5 | < 4.50.1-1.27.1 | 4.50.1-1.27.1 | Mar 14, 2017 | The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
- CVE-2018-19840Dec 4, 2018affected < 4.50.1-1.30.1fixed 4.50.1-1.30.1
The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.
- affected < 4.50.1-1.27.1fixed 4.50.1-1.27.1
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.50.1-1.27.1fixed 4.50.1-1.27.1
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.50.1-1.27.1fixed 4.50.1-1.27.1
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.50.1-1.27.1fixed 4.50.1-1.27.1
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.