Red Hat Security AdvisoryRHSA-2020:3877
audiofile security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) audiofile-1:0.3.6-9.el7, audiofile-devel-1:0.3.6-9.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) audiofile-1:0.3.6-9.el7, audiofile-devel-1:0.3.6-9.el7
- Red Hat Enterprise Linux Server Optional (v. 7) audiofile-1:0.3.6-9.el7, audiofile-1:0.3.6-9.el7.ppc, audiofile-devel-1:0.3.6-9.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) audiofile-1:0.3.6-9.el7, audiofile-devel-1:0.3.6-9.el7
Fixes 2 records
Priority MEDIUM 46
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04654 · Published 2018-09-16 · Partial fix CWE-787
Priority LOW 34
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03113 · Published 2018-07-08 · Partial fix CWE-476
