An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofileUpgrade audiofile-develUpgrade audiofile-debuginfo | Oct 28, 2020 | Sep 16, 2018 |
| Centos_linux | — | Upgrade audiofileUpgrade audiofile-develUpgrade audiofile-debuginfo | Oct 1, 2020 | Sep 16, 2018 |
| Debian | — | Upgrade audiofile | Jul 30, 2024 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade audiofile | Sep 28, 2020 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Aug 31, 2020 | Sep 16, 2018 |
| Oracle_linux | — | Upgrade audiofile-develUpgrade audiofile | Oct 7, 2020 | Sep 16, 2018 |
| Redhat_linux | — | Upgrade audiofileUpgrade audiofile-debuginfoNo solution existsUpgrade audiofile-devel | Oct 1, 2020 | Sep 16, 2018 |
| Suse | — | Upgrade libaudiofile1Upgrade audiofile-develUpgrade audiofileUpgrade libaudiofile1-32bitUpgrade audiofile-docUpgrade audiofile-devel-32bit | Oct 28, 2018 | Sep 16, 2018 |
| Ubuntu | — | Upgrade audiofile-toolsUpgrade audiofile-tools (Ubuntu Pro)Upgrade libaudiofile1Upgrade libaudiofile1 (Ubuntu Pro) | Nov 6, 2018 | Sep 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub