The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade SDL2-develUpgrade libmadUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-free-develUpgrade SDL2-staticUpgrade orcUpgrade libmad-develUpgrade orc-compilerUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-develUpgrade SDL2Upgrade gstreamer1Upgrade gstreamer1-plugins-bad-free | May 4, 2022 | Feb 20, 2018 |
| Alpine Linux | — | Upgrade libmad | Aug 22, 2024 | Feb 20, 2018 |
| Centos_linux | — | Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-develUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-debugsourceUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-goodUpgrade orcUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade orc-compiler-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade SDL-debugsourceUpgrade gstreamer1-plugins-good-debugsourceUpgrade orc-debugsourceUpgrade libmadUpgrade gstreamer1-debugsourceUpgrade SDLUpgrade orc-develUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-debuginfoUpgrade gstreamer1Upgrade libmad-debugsourceUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free | Apr 29, 2020 | Feb 20, 2018 |
| Oracle_linux | — | Upgrade orcUpgrade SDL-develUpgrade SDL2-develUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade gstreamer1-plugins-good-gtkUpgrade SDL2-staticUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1Upgrade gstreamer1-develUpgrade gstreamer1-plugins-baseUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-freeUpgrade libmadUpgrade SDLUpgrade gstreamer1-plugins-goodUpgrade SDL2Upgrade libmad-develUpgrade gstreamer1-plugins-base-devel | Oct 5, 2022 | Feb 20, 2018 |
| Redhat_linux | — | Upgrade orcUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1Upgrade SDL-develUpgrade libmadUpgrade SDL2-develUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-base-develUpgrade SDL-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-goodUpgrade libmad-develUpgrade SDL-debugsourceUpgrade SDL2-staticUpgrade libmad-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade SDLUpgrade gstreamer1-plugins-ugly-freeUpgrade gstreamer1-debuginfoUpgrade libmad-debugsourceUpgrade SDL2-debugsourceUpgrade SDL2-debuginfoUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade gstreamer1-debugsourceUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-good-debuginfoUpgrade orc-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-compilerUpgrade orc-compiler-debuginfoUpgrade SDL2Upgrade gstreamer1-plugins-baseUpgrade orc-devel | Apr 29, 2020 | Feb 20, 2018 |
| Rocky_linux | — | Upgrade orc-debugsourceUpgrade orc-compiler-debuginfoUpgrade libmadUpgrade gstreamer1-plugins-bad-freeUpgrade libmad-develUpgrade gstreamer1-debuginfoUpgrade libmad-debugsourceUpgrade gstreamer1-plugins-ugly-freeUpgrade orc-compilerUpgrade gstreamer1-debugsourceUpgrade SDL2Upgrade SDL2-develUpgrade SDL2-debugsourceUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade libmad-debuginfoUpgrade gstreamer1-plugins-ugly-free-debugsourceUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade SDL2-debuginfoUpgrade gstreamer1Upgrade orcUpgrade gstreamer1-plugins-ugly-free-debuginfoUpgrade SDL2-static | Mar 12, 2024 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub