The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade orcUpgrade SDL2-develUpgrade SDL2-staticUpgrade libmadUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade libmad-develUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1Upgrade SDL2Upgrade gstreamer1-plugins-ugly-freeUpgrade orc-devel | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade orc-debuginfoUpgrade gstreamer1-plugins-baseUpgrade libmadUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade SDLUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-compilerUpgrade gstreamer1-debugsourceUpgrade orc-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade libmad-debugsourceUpgrade orc-develUpgrade gstreamer1Upgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-develUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-compiler-debuginfoUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade SDL-develUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade orcUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-devel | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade orc-compilerUpgrade libmad-develUpgrade SDL2Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-goodUpgrade libmadUpgrade SDLUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL-develUpgrade orcUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1Upgrade orc-develUpgrade SDL2-develUpgrade gstreamer1-plugins-ugly-freeUpgrade SDL2-static | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-debuginfoUpgrade libmad-debugsourceUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade orc-debugsourceUpgrade SDL2Upgrade SDLUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-baseUpgrade orc-develUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade SDL2-debugsourceUpgrade SDL-debugsourceUpgrade SDL2-develUpgrade gstreamer1-plugins-good-gtkUpgrade SDL-debuginfoUpgrade orcUpgrade SDL-develUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade libmad-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade SDL2-staticUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade libmad | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade orc-debuginfoUpgrade gstreamer1-develUpgrade SDL2-staticUpgrade SDL2-develUpgrade SDL2-debugsourceUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade libmad-debuginfoUpgrade orcUpgrade libmadUpgrade gstreamer1-plugins-ugly-freeUpgrade libmad-debugsourceUpgrade gstreamer1-debuginfoUpgrade orc-compilerUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade SDL2Upgrade libmad-develUpgrade orc-debugsourceUpgrade orc-compiler-debuginfo | Mar 12, 2024 | Feb 20, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub