CVE-2017-6837

Description

WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

6.086

Associated Vulnerability

Vulnerability	OS Platform
audiofile Security Update (ALAS-2024-2601); audiofile-devel-0.3.6-9.amzn2.x86_64.rpm	Linux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.i686.rpm	Linux
audiofile Security Update (ALAS-2024-2601); audiofile-0.3.6-9.amzn2.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234