The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade orc-develUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1Upgrade libmad-develUpgrade SDL2Upgrade libmadUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-staticUpgrade gstreamer1-develUpgrade orcUpgrade SDL2-devel | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debugsourceUpgrade gstreamer1Upgrade libmadUpgrade orc-debugsourceUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade orc-debuginfoUpgrade orc-compilerUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-baseUpgrade SDLUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade libmad-debuginfoUpgrade SDL-debuginfoUpgrade orcUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade SDL-develUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-debugsource | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtkUpgrade SDL2-staticUpgrade gstreamer1Upgrade orc-develUpgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade SDL-develUpgrade SDL2-develUpgrade gstreamer1-plugins-ugly-freeUpgrade libmad-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade SDLUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade SDL2Upgrade libmad | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade gstreamer1-debugsourceUpgrade SDL2-debugsourceUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade SDL2-debuginfoUpgrade SDLUpgrade SDL2Upgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-develUpgrade orc-debugsourceUpgrade orc-compilerUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL-debuginfoUpgrade SDL-debugsourceUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade libmad-develUpgrade gstreamer1-plugins-good-gtkUpgrade libmadUpgrade orc-debuginfoUpgrade SDL-develUpgrade SDL2-staticUpgrade SDL2-develUpgrade orcUpgrade gstreamer1-plugins-good | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade gstreamer1-debuginfoUpgrade orc-debugsourceUpgrade libmad-debugsourceUpgrade orc-compiler-debuginfoUpgrade libmad-develUpgrade libmadUpgrade gstreamer1-debugsourceUpgrade SDL2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade orcUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL2-debugsourceUpgrade SDL2-develUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDL2-staticUpgrade orc-debuginfoUpgrade libmad-debuginfo | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub