CVE-2017-11548 The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file.
MediumCVSS 5.5
EPSS 3.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libao(Debian:12) | All versions | No fix listed |
| debian/libao(Debian:12) | = 1.2.2+20180113-1.1 | No fix listed |
| debian/libao(Debian:12) | = 1.2.2+20180113-1.2 | No fix listed |
| debian/libao(Debian:12) | = 1.2.2+20180113-1.3 | No fix listed |
| debian/libao(Debian:12) | = 1.2.2+20180113-1.4 | No fix listed |
| debian/libao(Debian:12) | = 1.2.2+20180113-1.5 | No fix listed |
| debian/libao(Debian:13) | All versions | No fix listed |
| debian/libao(Debian:13) | = 1.2.2+20180113-1.2 | No fix listed |
| debian/libao(Debian:13) | = 1.2.2+20180113-1.3 | No fix listed |
| debian/libao(Debian:13) | = 1.2.2+20180113-1.4 | No fix listed |
| debian/libao(Debian:13) | = 1.2.2+20180113-1.5 | No fix listed |
| debian/libao(Debian:14) | All versions | No fix listed |
| debian/libao(Debian:14) | = 1.2.2+20180113-1.2 | No fix listed |
| debian/libao(Debian:14) | = 1.2.2+20180113-1.3 | No fix listed |
| debian/libao(Debian:14) | = 1.2.2+20180113-1.4 | No fix listed |
| debian/libao(Debian:14) | = 1.2.2+20180113-1.5 | No fix listed |
| xiph libao | = 1.2.0 | No fix listed |
| alpine/libao(Alpine:v3.10) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.11) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.12) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.13) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.14) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.15) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.16) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.17) | < 1.2.0-r3 | 1.2.0-r3 |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/libao(Alpine:v3.18) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.19) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.20) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.21) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.22) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.23) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.24) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.5) | < 1.2.0-r2 | 1.2.0-r2 |
| alpine/libao(Alpine:v3.6) | < 1.2.0-r2 | 1.2.0-r2 |
| alpine/libao(Alpine:v3.7) | < 1.2.0-r2 | 1.2.0-r2 |
| alpine/libao(Alpine:v3.8) | < 1.2.0-r3 | 1.2.0-r3 |
| alpine/libao(Alpine:v3.9) | < 1.2.0-r3 | 1.2.0-r3 |
| ubuntu/libao(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/libao(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/libao(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/libao(Ubuntu:22.04) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-11548 vendor-advisory
- bugs.debian.org issue-tracking
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- seclists.org mailing-list third-party-advisory
- 42400 exploit third-party-advisory vdb-entry
- security.alpinelinux.org vendor-advisory