The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade orc-compilerUpgrade libmad-develUpgrade gstreamer1Upgrade SDL2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-develUpgrade libmadUpgrade SDL2-develUpgrade orcUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade SDL2-static | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade SDL-debuginfoUpgrade orcUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade libmad-debuginfoUpgrade orc-compiler-debuginfoUpgrade SDL-debugsourceUpgrade SDL-develUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade libmadUpgrade orc-develUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-debugsourceUpgrade orc-compilerUpgrade SDLUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-debugsourceUpgrade orc-debuginfoUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade SDL2Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-develUpgrade SDLUpgrade libmad-develUpgrade libmadUpgrade gstreamer1-plugins-goodUpgrade orc-compilerUpgrade SDL2-staticUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1Upgrade gstreamer1-plugins-good-gtkUpgrade orc-develUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-develUpgrade gstreamer1-develUpgrade SDL-develUpgrade orc | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-baseUpgrade SDL2-debugsourceUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade libmad-debugsourceUpgrade orc-compilerUpgrade orc-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDLUpgrade orc-compiler-debuginfoUpgrade SDL2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-debuginfoUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade orc-debuginfoUpgrade SDL-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade libmadUpgrade gstreamer1Upgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-goodUpgrade SDL-debuginfoUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-base-develUpgrade orcUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade SDL2-develUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade SDL2-staticUpgrade libmad-devel | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-develUpgrade gstreamer1-develUpgrade gstreamer1Upgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL2-debugsourceUpgrade SDL2-develUpgrade SDL2-debuginfoUpgrade SDL2-staticUpgrade libmad-debuginfoUpgrade orc-debuginfoUpgrade libmad-debugsourceUpgrade orc-compiler-debuginfoUpgrade libmadUpgrade orc-debugsourceUpgrade orc-compilerUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-bad-freeUpgrade SDL2Upgrade gstreamer1-debuginfoUpgrade libmad-devel | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub