Home

CVE-2017-6827

Description

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
33.778

Associated Vulnerability

VulnerabilityOS Platform
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.3-2ubuntu0.3_i386.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.3-2ubuntu0.3_amd64.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_i386.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_amd64.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.3-2ubuntu0.3_i386.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.3-2ubuntu0.3_amd64.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_i386.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_amd64.debLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) audiofile-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) audiofile-debuginfo-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) audiofile-debugsource-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) libaudiofile1-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) libaudiofile1-32bit-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) libaudiofile1-debuginfo-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:0940-1(SUSE Linux Enterprise Desktop 12-SP1 ) libaudiofile1-debuginfo-32bit-0.3.6-10.1.x86_64.rpmLinux
SUSE-SU-2017:1182-1(SUSE Linux Enterprise Server 11-SP4 ) audiofile-0.2.6-142.17.1.x86_64.rpmLinux
SUSE-SU-2017:1182-1(SUSE Linux Enterprise Server 11-SP4 ) audiofile-32bit-0.2.6-142.17.1.x86_64.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-devel-0.3.6-9.amzn2.x86_64.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.i686.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234