rpm package
suse/wavpack&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-35738 | — | < 4.60.99-5.9.1 | 4.60.99-5.9.1 | Dec 28, 2020 | WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected. | ||
| CVE-2016-10172 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10171 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10170 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10169 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
- CVE-2020-35738Dec 28, 2020affected < 4.60.99-5.9.1fixed 4.60.99-5.9.1
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.