VDB

GCVE-110-MAGEIA-2019-45

GCVE-110-MAGEIA-2019-45
Advisory Published
Vulnetix · Advisory published January 23, 2019
Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service (CVE-2018-6767). It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cause a denial of service (CVE-2018-7253). It was discovered that WavPack incorrectly handled certain CAF files. An attacker could possibly use this to cause a denial of service (CVE-2018-7254). Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu discovered that WavPack incorrectly handled certain .wav files. An attacker could possibly use this to execute arbitrary code or cause a denial of service (CVE-2018-10536, CVE-2018-10537). Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu discovered that WavPack incorrectly handled certain .wav files. An attacker could possibly use this to cause a denial of service (CVE-2018-10538, CVE-2018-10539, CVE-2018-10540). It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2018-19840, CVE-2018-19841).

Affected Products

VendorProductVersionsPlatforms
Mageiakernel-userspace-headers0 (affected), 4.14.131-1.mga6 (unaffected)—
Mageiakernel0 (affected), 4.14.131-1.mga6 (unaffected)—
Mageiakmod-virtualbox6.0.8-5.mga6 (unaffected), 0 (affected)—
Mageiawavpack0 (affected), 5.1.0-1.1.mga6 (unaffected), 0 (affected), 5.1.0-1.1.mga6 (unaffected)—
Mageiakmod-xtables-addons0 (affected), 2.13-89.mga6 (unaffected)—
Mageiakmod-vboxadditions0 (affected), 6.0.8-5.mga6 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›