An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofileUpgrade audiofile-debuginfoUpgrade audiofile-devel | Oct 28, 2020 | Sep 16, 2018 |
| Centos_linux | — | Upgrade audiofileUpgrade audiofile-develUpgrade audiofile-debuginfo | Oct 1, 2020 | Sep 16, 2018 |
| Debian | — | Upgrade audiofile | Jul 30, 2024 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade audiofile | Sep 28, 2020 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Aug 31, 2020 | Sep 16, 2018 |
| Oracle_linux | — | Upgrade audiofile-develUpgrade audiofile | Oct 7, 2020 | Sep 16, 2018 |
| Redhat_linux | — | No solution existsUpgrade audiofileUpgrade audiofile-debuginfoUpgrade audiofile-devel | Oct 1, 2020 | Sep 16, 2018 |
| Suse | — | Upgrade libaudiofile1-32bitUpgrade audiofileUpgrade audiofile-devel-32bitUpgrade audiofile-docUpgrade libaudiofile1Upgrade audiofile-devel | Oct 28, 2018 | Sep 16, 2018 |
| Ubuntu | — | Upgrade audiofile-toolsUpgrade libaudiofile1Upgrade libaudiofile1 (Ubuntu Pro)Upgrade audiofile-tools (Ubuntu Pro) | Nov 6, 2018 | Sep 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub