The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-ugly-freeUpgrade SDL2Upgrade gstreamer1Upgrade libmad-develUpgrade orc-develUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-staticUpgrade libmadUpgrade gstreamer1-develUpgrade orcUpgrade SDL2-devel | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade orc-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade libmad-debugsourceUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade orc-compilerUpgrade orc-develUpgrade gstreamer1Upgrade libmadUpgrade SDLUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-develUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade orcUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-good-gtkUpgrade SDL-develUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade libmadUpgrade gstreamer1-plugins-goodUpgrade libmad-develUpgrade gstreamer1-plugins-base-develUpgrade SDL2Upgrade SDLUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL-develUpgrade orcUpgrade SDL2-develUpgrade SDL2-staticUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1Upgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtkUpgrade orc-devel | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade SDL2-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade SDL2-debuginfoUpgrade SDL2Upgrade orc-debugsourceUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-plugins-good-debugsourceUpgrade orc-compilerUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDLUpgrade orcUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-debuginfoUpgrade SDL2-staticUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1Upgrade libmad-develUpgrade SDL2-develUpgrade gstreamer1-plugins-good-gtkUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL-debuginfoUpgrade gstreamer1-develUpgrade SDL-debugsourceUpgrade SDL-develUpgrade libmadUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-tools-debuginfo | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade libmadUpgrade orc-debugsourceUpgrade gstreamer1-debuginfoUpgrade orc-compilerUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade SDL2Upgrade libmad-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade libmad-develUpgrade gstreamer1-debugsourceUpgrade SDL2-staticUpgrade orc-debuginfoUpgrade orc-develUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-develUpgrade SDL2-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDL2-debugsourceUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade gstreamer1-plugins-bad-free-debuginfo | Mar 12, 2024 | Feb 20, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub