CVE-2017-17554 Aubio is vulnerable to a NULL pointer dereference
MediumCVSS 5.5
EPSS 0.81%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi aubio(PyPI) | < 0.4.7 | 0.4.7 |
| pypi aubio(PyPI) | = 0.4.3 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3.post1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a2 | No fix listed |
| pypi aubio(PyPI) | = 0.4.4 | No fix listed |
| pypi aubio(PyPI) | = 0.4.5 | No fix listed |
| pypi aubio(PyPI) | = 0.4.6 | No fix listed |
| debian/aubio(Debian:12) | < 0.4.6-1 | 0.4.6-1 |
| debian/aubio(Debian:13) | < 0.4.6-1 | 0.4.6-1 |
| debian/aubio(Debian:14) | < 0.4.6-1 | 0.4.6-1 |
| aubio | = 0.4.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com
- github.com product
- github.com
- github.com
- github.com vendor-advisory
- Debian Security Tracker CVE-2017-17554 vendor-advisory
- github.com
- bugs.debian.org issue-tracking