An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade audiofileUpgrade audiofile-debuginfoUpgrade audiofile-devel | Oct 28, 2020 | Sep 16, 2018 |
| Centos_linux | — | Upgrade audiofile-debuginfoUpgrade audiofile-develUpgrade audiofile | Oct 1, 2020 | Sep 16, 2018 |
| Debian | — | Upgrade audiofile | Jul 30, 2024 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade audiofile | Sep 28, 2020 | Sep 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade audiofile | Aug 31, 2020 | Sep 16, 2018 |
| Oracle_linux | — | Upgrade audiofileUpgrade audiofile-devel | Oct 7, 2020 | Sep 16, 2018 |
| Redhat_linux | — | Upgrade audiofileNo solution existsUpgrade audiofile-debuginfoUpgrade audiofile-devel | Oct 1, 2020 | Sep 16, 2018 |
| Suse | — | Upgrade audiofile-develUpgrade libaudiofile1Upgrade audiofileUpgrade audiofile-devel-32bitUpgrade audiofile-docUpgrade libaudiofile1-32bit | Oct 28, 2018 | Sep 16, 2018 |
| Ubuntu | — | Upgrade libaudiofile1Upgrade libaudiofile1 (Ubuntu Pro)Upgrade audiofile-tools (Ubuntu Pro)Upgrade audiofile-tools | Nov 6, 2018 | Sep 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub