ALT-PU-2017-1156-1
Closed vulnerabilities
Published: 2017-03-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-10169
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- 95883
- 95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35557889/
- https://sourceforge.net/p/wavpack/mailman/message/35557889/
- USN-3568-1
- USN-3568-1
Published: 2017-03-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-10170
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- 95883
- 95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561921/
- https://sourceforge.net/p/wavpack/mailman/message/35561921/
Published: 2017-03-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-10171
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- 95883
- 95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561939/
- https://sourceforge.net/p/wavpack/mailman/message/35561939/
Published: 2017-03-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-10172
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- [oss-security] 20170128 Re: wavpack: multiple out of bounds memory reads
- 95883
- 95883
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
- https://sourceforge.net/p/wavpack/mailman/message/35561951/
- https://sourceforge.net/p/wavpack/mailman/message/35561951/