rpm package
suse/wavpack&distro=SUSE Linux Enterprise Software Development Kit 12 SP2
pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2016-10172 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10171 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10170 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. | |
| CVE-2016-10169 | Med | 5.5 | < 4.60.99-5.3.1 | 4.60.99-5.3.1 | Mar 14, 2017 | The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
- affected < 4.60.99-5.3.1fixed 4.60.99-5.3.1
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.