CVE-2018-19802 Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi aubio(PyPI) | >= 0.4.0, < 0.4.9 | 0.4.9 |
| pypi aubio(PyPI) | = 0.4.3 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3.post1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a1 | No fix listed |
| pypi aubio(PyPI) | = 0.4.3a2 | No fix listed |
| pypi aubio(PyPI) | = 0.4.4 | No fix listed |
| pypi aubio(PyPI) | = 0.4.5 | No fix listed |
| pypi aubio(PyPI) | = 0.4.6 | No fix listed |
| pypi aubio(PyPI) | = 0.4.7 | No fix listed |
| pypi aubio(PyPI) | = 0.4.8 | No fix listed |
| debian/aubio(Debian:12) | < 0.4.9-1 | 0.4.9-1 |
| debian/aubio(Debian:13) | < 0.4.9-1 | 0.4.9-1 |
| debian/aubio(Debian:14) | < 0.4.9-1 | 0.4.9-1 |
| aubio | >= 0.4.0, <= 0.4.8 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- github.com release-notes third-party-advisory
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- openSUSE-SU-2019:1618 vendor-advisory
- openSUSE-SU-2019:1624 vendor-advisory
- openSUSE-SU-2019:1834 vendor-advisory
- openSUSE-SU-2019:1852 vendor-advisory
- github.com vendor-advisory
- Debian Security Tracker CVE-2018-19802 vendor-advisory
- FEDORA-2019-00ca0acb47 vendor-advisory
- FEDORA-2019-b1157fdfdc vendor-advisory
- bugs.debian.org issue-tracking