CVE-2018-14522 Aubio is vulnerable to denial of service via aubio_pitch_set_unit function
HighCVSS 8.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi aubio(PyPI) | < 0.4.7 | 0.4.7 |
| pypi aubio(PyPI) | = 0.4.3 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3.post1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a2 | No fix listed |
| pypi aubio(PyPI) | = 0.4.4 | No fix listed |
| pypi aubio(PyPI) | = 0.4.5 | No fix listed |
| pypi aubio(PyPI) | = 0.4.6 | No fix listed |
| debian/aubio(Debian:12) | < 0.4.6-1 | 0.4.6-1 |
| debian/aubio(Debian:13) | < 0.4.6-1 | 0.4.6-1 |
| debian/aubio(Debian:14) | < 0.4.6-1 | 0.4.6-1 |
| aubio | = 0.4.6 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
| openSUSE leap | = 42.3 | No fix listed |
| SUSE linux enterprise | = 15.0 | No fix listed |
| ubuntu/aubio(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/aubio(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/aubio(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/aubio(Ubuntu:22.04) | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit issue-tracking third-party-advisory
- github.com patch
- github.com product
- github.com
- openSUSE-SU-2019:1049 third-party-advisory vendor-advisory
- openSUSE-SU-2019:1229 vendor-advisory
- github.com vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-14522 vendor-advisory
- bugs.debian.org issue-tracking