The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-ugly-freeUpgrade SDL2Upgrade gstreamer1Upgrade libmad-develUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade orc-develUpgrade libmadUpgrade SDL2-develUpgrade gstreamer1-develUpgrade orcUpgrade SDL2-staticUpgrade gstreamer1-plugins-bad-free-devel | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade SDL-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-compiler-debuginfoUpgrade orcUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade SDL-debugsourceUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debugsourceUpgrade orc-debugsourceUpgrade libmadUpgrade SDLUpgrade gstreamer1-debuginfoUpgrade libmad-debugsourceUpgrade orc-develUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-compiler | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade gstreamer1Upgrade SDL-develUpgrade gstreamer1-plugins-ugly-freeUpgrade orcUpgrade SDL2-staticUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-develUpgrade orc-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-goodUpgrade SDLUpgrade gstreamer1-plugins-base-develUpgrade libmadUpgrade gstreamer1-plugins-bad-freeUpgrade libmad-develUpgrade orc-compilerUpgrade SDL2Upgrade gstreamer1-plugins-base | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade SDL-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade libmadUpgrade SDL-debugsourceUpgrade orcUpgrade SDL-debuginfoUpgrade libmad-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-base-develUpgrade libmad-debuginfoUpgrade gstreamer1-develUpgrade SDL2-staticUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade SDL2-develUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-debugsourceUpgrade libmad-debugsourceUpgrade SDL2-debugsourceUpgrade orc-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade orc-compilerUpgrade gstreamer1-plugins-baseUpgrade SDLUpgrade orc-compiler-debuginfoUpgrade orc-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade SDL2 | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade orc-debugsourceUpgrade orc-compilerUpgrade libmad-develUpgrade gstreamer1-debuginfoUpgrade orc-compiler-debuginfoUpgrade libmadUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade SDL2Upgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDL2-staticUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade SDL2-debugsourceUpgrade SDL2-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-develUpgrade SDL2-develUpgrade libmad-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub