The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade orc-develUpgrade gstreamer1-plugins-ugly-freeUpgrade libmad-develUpgrade SDL2Upgrade gstreamer1Upgrade orc-compilerUpgrade gstreamer1-plugins-bad-freeUpgrade libmadUpgrade gstreamer1-develUpgrade SDL2-staticUpgrade orcUpgrade SDL2-develUpgrade gstreamer1-plugins-bad-free-devel | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade SDL-debugsourceUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade orcUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-base-develUpgrade SDL-develUpgrade orc-compiler-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade libmad-debuginfoUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1Upgrade libmad-debugsourceUpgrade gstreamer1-debugsourceUpgrade orc-compilerUpgrade orc-develUpgrade orc-debugsourceUpgrade libmadUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade SDLUpgrade gstreamer1-plugins-base-tools-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade orcUpgrade gstreamer1Upgrade SDL2-staticUpgrade SDL2-develUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-develUpgrade orc-develUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL-develUpgrade gstreamer1-plugins-good-gtkUpgrade orc-compilerUpgrade gstreamer1-plugins-goodUpgrade libmad-develUpgrade libmadUpgrade SDL2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-baseUpgrade SDL | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade orcUpgrade libmad-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade libmad-develUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade SDL-debugsourceUpgrade libmadUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-staticUpgrade SDL-develUpgrade SDL2-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade SDL2-debugsourceUpgrade SDLUpgrade libmad-debugsourceUpgrade orc-debugsourceUpgrade orc-develUpgrade SDL2Upgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade SDL2-debuginfoUpgrade orc-compilerUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-debugsourceUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-ugly-free-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade orc-debugsourceUpgrade SDL2Upgrade gstreamer1-debuginfoUpgrade gstreamer1-debugsourceUpgrade libmad-debugsourceUpgrade orc-compiler-debuginfoUpgrade libmadUpgrade libmad-develUpgrade orc-compilerUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade SDL2-debuginfoUpgrade SDL2-staticUpgrade orc-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDL2-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-develUpgrade SDL2-develUpgrade orc-debuginfoUpgrade libmad-debuginfo | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub