An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofile-debuginfoUpgrade audiofile-develUpgrade audiofile | Oct 28, 2020 | Sep 16, 2018 |
| Centos_linux | — | Upgrade audiofile-develUpgrade audiofile-debuginfoUpgrade audiofile | Oct 1, 2020 | Sep 16, 2018 |
| Debian | — | Upgrade audiofile | Jul 30, 2024 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade audiofile | Sep 28, 2020 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Aug 31, 2020 | Sep 16, 2018 |
| Oracle_linux | — | Upgrade audiofile-develUpgrade audiofile | Oct 7, 2020 | Sep 16, 2018 |
| Redhat_linux | — | Upgrade audiofile-debuginfoUpgrade audiofileNo solution existsUpgrade audiofile-devel | Oct 1, 2020 | Sep 16, 2018 |
| Suse | — | Upgrade audiofile-develUpgrade libaudiofile1Upgrade audiofileUpgrade audiofile-devel-32bitUpgrade audiofile-docUpgrade libaudiofile1-32bit | Oct 28, 2018 | Sep 16, 2018 |
| Ubuntu | — | Upgrade audiofile-toolsUpgrade libaudiofile1Upgrade audiofile-tools (Ubuntu Pro)Upgrade libaudiofile1 (Ubuntu Pro) | Nov 6, 2018 | Sep 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub