The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1Upgrade orc-develUpgrade libmad-develUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade SDL2Upgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade SDL2-develUpgrade orcUpgrade libmadUpgrade SDL2-static | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade libmadUpgrade gstreamer1-debugsourceUpgrade SDLUpgrade orc-debugsourceUpgrade orc-compilerUpgrade gstreamer1-debuginfoUpgrade gstreamer1Upgrade libmad-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-baseUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade SDL-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade libmad-debuginfoUpgrade orcUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-compiler-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-develUpgrade orcUpgrade gstreamer1-develUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1Upgrade SDL-develUpgrade SDL2-staticUpgrade orc-develUpgrade libmad-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade orc-compilerUpgrade libmadUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-baseUpgrade SDLUpgrade SDL2 | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade SDL2-debugsourceUpgrade orc-debugsourceUpgrade SDLUpgrade gstreamer1-plugins-baseUpgrade SDL2-debuginfoUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-debugsourceUpgrade SDL2Upgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-debuginfoUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade libmadUpgrade gstreamer1-plugins-goodUpgrade libmad-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade SDL-debugsourceUpgrade SDL-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade SDL2-develUpgrade SDL2-staticUpgrade orcUpgrade libmad-develUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-good-gtk | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade SDL2-staticUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orcUpgrade SDL2-debugsourceUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade orc-debuginfoUpgrade SDL2-develUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1Upgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade libmadUpgrade gstreamer1-debugsourceUpgrade SDL2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade libmad-debugsourceUpgrade orc-compiler-debuginfoUpgrade libmad-develUpgrade orc-compilerUpgrade orc-debugsource | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub