In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofile-develUpgrade audiofileUpgrade audiofile-debuginfo | Mar 22, 2023 | Feb 24, 2022 |
| Debian | — | Upgrade audiofile | Nov 20, 2023 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Mar 13, 2024 | Feb 24, 2022 |
| Ubuntu | — | Upgrade audiofile-toolsUpgrade libaudiofile1Upgrade audiofile-tools (Ubuntu Pro)Upgrade libaudiofile1 (Ubuntu Pro) | Dec 19, 2023 | Feb 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub