CVE-2018-7254
19.02.2018, 23:29
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wavpack | wavpack | 5.1.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libwavpack1 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| wavpack |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| wavpack-devel |
|
Common Weakness Enumeration
References