ISOMAN

CVE

CVE-2018-6767

A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
  2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889276
  3. https://github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5
  4. https://github.com/dbry/WavPack/issues/27
  5. https://seclists.org/bugtraq/2019/Dec/37
  6. https://usn.ubuntu.com/3568-1/
  7. https://www.debian.org/security/2018/dsa-4125
  8. http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
  9. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889276
  10. https://github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5
  11. https://github.com/dbry/WavPack/issues/27
  12. https://seclists.org/bugtraq/2019/Dec/37
  13. https://usn.ubuntu.com/3568-1/
  14. https://www.debian.org/security/2018/dsa-4125