An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofile-develUpgrade audiofileUpgrade audiofile-debuginfo | Oct 28, 2020 | Sep 16, 2018 |
| Centos_linux | — | Upgrade audiofile-debuginfoUpgrade audiofile-develUpgrade audiofile | Oct 1, 2020 | Sep 16, 2018 |
| Debian | — | Upgrade audiofile | Jul 30, 2024 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade audiofile | Sep 28, 2020 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Aug 31, 2020 | Sep 16, 2018 |
| Oracle_linux | — | Upgrade audiofile-develUpgrade audiofile | Oct 7, 2020 | Sep 16, 2018 |
| Redhat_linux | — | Upgrade audiofile-develNo solution existsUpgrade audiofileUpgrade audiofile-debuginfo | Oct 1, 2020 | Sep 16, 2018 |
| Suse | — | Upgrade libaudiofile1-32bitUpgrade audiofileUpgrade audiofile-docUpgrade audiofile-devel-32bitUpgrade libaudiofile1Upgrade audiofile-devel | Oct 28, 2018 | Sep 16, 2018 |
| Ubuntu | — | Upgrade audiofile-tools (Ubuntu Pro)Upgrade libaudiofile1Upgrade libaudiofile1 (Ubuntu Pro)Upgrade audiofile-tools | Nov 6, 2018 | Sep 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub