Lucene search
Veracode Vulnerability DatabaseVERACODE:28858HistoryDec 30, 2020 - 11:21 p.m.
Integer Overflow
2020-12-3023:21:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
wavpack
integer overflow
vulnerability
pack_utils.c
software
EPSS
0.001
Percentile
45.4%
WavPack is vulnerable to integer overflow. The vulnerability exist because of an out-of-bounds write in WavpackPackSamples in pack_utils.c.
References
github.com/dbry/WavPack/issues/91
lists.debian.org/debian-lts-announce/2021/01/msg00013.html
lists.fedoraproject.org/archives/list/[email protected]/message/2YZLKYE66EU4XRHTABV5LB2G7ZDZ422F/
lists.fedoraproject.org/archives/list/[email protected]/message/76B7K6F74FDQATG7FECXR5KPIG52O2VL/
lists.fedoraproject.org/archives/list/[email protected]/message/PENN4ZXRPZULEJOYTTLUZMBZ5H46QTUC/
lists.fedoraproject.org/archives/list/[email protected]/message/VDFY4NGGDUTLVID5PNVU7LL2G2ZJLZFY/
security-tracker.debian.org/tracker/CVE-2020-35738
Related
nessus
nessus
Fedora 33 : mingw-wavpack (2021-b7826fcedf)
2021-02-25 00:00:00
Fedora 32 : mingw-wavpack (2021-2e2fc2eac6)
2021-02-25 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : wavpack (SSA:2021-014-01)
2021-01-15 00:00:00
openvas
openvas
Fedora: Security Advisory for wavpack (FEDORA-2021-de45e7bb88)
2021-02-04 00:00:00
Ubuntu: Security Advisory (USN-4682-1)
2021-01-11 00:00:00
Slackware: Security Advisory (SSA:2021-014-01)
2022-04-21 00:00:00
nvd
nvd
CVE-2020-35738
2020-12-28 04:15:12
redhatcve
redhatcve
CVE-2020-35738
2020-12-28 18:34:28
archlinux
archlinux
[ASA-202101-23] wavpack: arbitrary code execution
2021-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: wavpack-5.4.0-1.fc33
2021-01-21 01:47:31
[SECURITY] Fedora 32 Update: wavpack-5.4.0-1.fc32
2021-02-02 02:22:47
[SECURITY] Fedora 33 Update: mingw-wavpack-5.4.0-1.fc33
2021-02-24 20:42:30
freebsd
freebsd
wavpack -- integer overflow in pack_utils.c
2020-12-29 00:00:00
ubuntu
ubuntu
WavPack vulnerability
2021-01-06 00:00:00
mageia
mageia
Updated wavpack packages fix a security vulnerability
2021-06-23 20:11:28
alpinelinux
alpinelinux
CVE-2020-35738
2020-12-28 04:15:12
ubuntucve
ubuntucve
CVE-2020-35738
2020-12-28 00:00:00
cvelist
cvelist
CVE-2020-35738
2020-12-28 03:54:10
osv
osv
wavpack vulnerability
2021-01-06 13:24:51
CVE-2020-35738
2020-12-28 04:15:12
wavpack - security update
2021-01-15 00:00:00
slackware
slackware
[slackware-security] wavpack
2021-01-14 20:54:17
prion
prion
Integer overflow
2020-12-28 04:15:00
debiancve
debiancve
CVE-2020-35738
2020-12-28 04:15:12
cve
cve
CVE-2020-35738
2020-12-28 04:15:12
debian
debian
[SECURITY] [DLA 2525-1] wavpack security update
2021-01-15 10:28:51
suse
suse
Security update for wavpack (moderate)
2021-01-24 00:00:00
Security update for wavpack (moderate)
2021-01-24 00:00:00