Lucene search
Veracode Vulnerability DatabaseVERACODE:25231HistoryMay 10, 2020 - 11:21 p.m.
Arbitrary Code Execution
2020-05-1023:21:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.009
Percentile
82.9%
wavpack is vulnerable to arbitrary code execution. A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c allows a remote attacker to execute arbitrary code on the system via a malicious RF64 file.
References
packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=889276
github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5
github.com/dbry/WavPack/issues/27
seclists.org/bugtraq/2019/Dec/37
usn.ubuntu.com/3568-1/
www.debian.org/security/2018/dsa-4125
Related
cvelist
cvelist
CVE-2018-6767
2018-02-06 22:00:00
redhatcve
redhatcve
CVE-2018-6767
2018-02-07 02:50:03
ubuntucve
ubuntucve
CVE-2018-6767
2018-02-06 00:00:00
alpinelinux
alpinelinux
CVE-2018-6767
2018-02-06 22:29:00
debiancve
debiancve
CVE-2018-6767
2018-02-06 22:29:00
prion
prion
Stack overflow
2018-02-06 22:29:00
osv
osv
CVE-2018-6767
2018-02-06 22:29:00
wavpack - security update
2018-02-27 00:00:00
libwavpack1-32bit-5.4.0-1.6 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2018-6767
2018-02-06 22:29:00
nvd
nvd
CVE-2018-6767
2018-02-06 22:29:00
openvas
openvas
Ubuntu: Security Advisory (USN-3568-1)
2018-10-26 00:00:00
Fedora Update for wavpack FEDORA-2018-d94e205df8
2018-03-14 00:00:00
Fedora Update for wavpack FEDORA-2018-3ba1be2e79
2018-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: wavpack-5.1.0-7.fc27
2018-02-27 17:31:17
[SECURITY] Fedora 26 Update: wavpack-5.1.0-7.fc26
2018-03-13 17:19:56
[SECURITY] Fedora 27 Update: mingw-wavpack-5.1.0-4.fc27
2018-03-06 17:35:08
nessus
nessus
Fedora 26 : wavpack (2018-d94e205df8)
2018-03-14 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : WavPack vulnerabilities (USN-3568-1)
2018-02-13 00:00:00
Fedora 27 : wavpack (2018-3ba1be2e79)
2018-02-28 00:00:00
ubuntu
ubuntu
WavPack vulnerabilities
2018-02-12 00:00:00
debian
debian
[SECURITY] [DSA 4125-1] wavpack security update
2018-02-27 20:32:22
[SECURITY] [DSA 4125-1] wavpack security update
2018-02-27 20:32:22
archlinux
archlinux
[ASA-201802-13] lib32-wavpack: arbitrary code execution
2018-02-23 00:00:00
[ASA-201802-12] wavpack: arbitrary code execution
2018-02-23 00:00:00
freebsd
freebsd
wavpack -- multiple vulnerabilities
2018-05-09 00:00:00
slackware
slackware
[slackware-security] wavpack
2019-12-19 23:44:00
mageia
mageia
Updated wavpack packages fix security vulnerabilities
2019-01-23 18:50:09
suse
suse
Security update for wavpack (moderate)
2021-01-24 00:00:00
Security update for wavpack (moderate)
2021-01-24 00:00:00