Home

CVE-2017-6830

Description

Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
6.895

Associated Vulnerability

VulnerabilityOS Platform
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.3-2ubuntu0.3_i386.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.3-2ubuntu0.3_amd64.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_i386.debLinux
Open-source version of the SGI audiofile library (USN-2787-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_amd64.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.3-2ubuntu0.3_i386.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.3-2ubuntu0.3_amd64.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_i386.debLinux
Open-source version of the SGI audiofile library (USN-3241-1) libaudiofile1_0.3.6-2ubuntu0.14.04.2_amd64.debLinux
SUSE-SU-2017:1182-1(SUSE Linux Enterprise Server 11-SP4 ) audiofile-0.2.6-142.17.1.x86_64.rpmLinux
SUSE-SU-2017:1182-1(SUSE Linux Enterprise Server 11-SP4 ) audiofile-32bit-0.2.6-142.17.1.x86_64.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-devel-0.3.6-9.amzn2.x86_64.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.i686.rpmLinux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234