ALT-PU-2017-1156-1
Closed vulnerabilities
Published: 2017-03-14
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2016-10169
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (4.3)
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35557889/
- https://usn.ubuntu.com/3568-1/
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35557889/
- https://usn.ubuntu.com/3568-1/
Published: 2017-03-14
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2016-10170
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (4.3)
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561921/
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561921/
Published: 2017-03-14
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2016-10171
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (4.3)
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561939/
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561939/
Published: 2017-03-14
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2016-10172
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (4.3)
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561951/
- http://www.openwall.com/lists/oss-security/2017/01/28/9
- http://www.securityfocus.com/bid/95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561951/