Home

CVE-2018-13440

Description

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
6.018

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) audiofile-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) audiofile-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) audiofile-debuginfo-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) audiofile-debuginfo-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) audiofile-debugsource-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) audiofile-debugsource-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) libaudiofile1-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) libaudiofile1-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) libaudiofile1-32bit-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) libaudiofile1-32bit-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) libaudiofile1-debuginfo-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) libaudiofile1-debuginfo-0.3.6-11.7.8.x86_64_SP4.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP5 ) libaudiofile1-debuginfo-32bit-0.3.6-11.7.8.x86_64.rpmLinux
SUSE-SU-2020:1619-1(SUSE Linux Enterprise Server 12-SP4 ) libaudiofile1-debuginfo-32bit-0.3.6-11.7.8.x86_64_SP4.rpmLinux
(RHSA-2020:3877) audiofile security update audiofile-0.3.6-9.el7.i686.rpmLinux
(RHSA-2020:3877) audiofile security update audiofile-0.3.6-9.el7.x86_64.rpmLinux
(RHSA-2020:3877) audiofile security update audiofile-devel-0.3.6-9.el7.i686.rpmLinux
(RHSA-2020:3877) audiofile security update audiofile-devel-0.3.6-9.el7.x86_64.rpmLinux
(CESA-2020:3877) audiofile security update audiofile-0.3.6-9.el7.x86_64.rpmLinux
(CESA-2020:3877) audiofile security update audiofile-devel-0.3.6-9.el7.x86_64.rpmLinux
(RHSA-2020:3877)Moderate: security update audiofile-debuginfo-0.3.6-9.el7.i686.rpmLinux
(RHSA-2020:3877)Moderate: security update audiofile-debuginfo-0.3.6-9.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234