Published: 20/03/2017 Updated: 31/03/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote malicious users to cause a denial of service (crash) via a crafted file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
audiofile audiofile 0.2.7
audiofile audiofile 0.3.0
audiofile audiofile 0.3.1
audiofile audiofile 0.3.2
audiofile audiofile 0.3.3
audiofile audiofile 0.3.4
audiofile audiofile 0.3.5
audiofile audiofile 0.3.6
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #857651 Multiple security issues Package: src:audiofile; Maintainer for src:audiofile is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 13 Mar 2017 19:03:02 UTC Severity: grave Tags: security Found in version au ...

audiofile could be made to crash or run programs if it opened a specially crafted file ...

Several vulnerabilities have been discovered in the audiofile library, which may result in denial of service or the execution of arbitrary code if a malformed audio file is processed For the stable distribution (jessie), these problems have been fixed in version 036-2+deb8u2 For the upcoming stable distribution (stretch), these problems have be ...

Heap-based buffer overflow in the decodeBlockWAVE function in IMAcpp in Audio File Library (aka audiofile) 036 allows remote attackers to cause a denial of service (crash) via a crafted file ...

Heap-based buffer overflow in IMA::decodeBlockWAVE (IMAcpp) that could lead to arbitrary code execution ...

CWE-119 https://github.com/mpruett/audiofile/issues/35 https://github.com/antlarr/audiofile/commit/a2e9eab8ea87c4ffc494d839ebb4ea145eb9f2e6 https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp/http://www.openwall.com/lists/oss-security/2017/03/13/3 http://www.securityfocus.com/bid/97588 http://www.debian.org/security/2017/dsa-3814 https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-6831 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857651 https://usn.ubuntu.com/3241-1/https://nvd.nist.gov

CVE-2017-6831

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect