154 lines
4.3 KiB
JSON
154 lines
4.3 KiB
JSON
{
|
|
"schema_version": "1.7.0",
|
|
"id": "USN-3637-1",
|
|
"summary": "wavpack vulnerabilities",
|
|
"details": "Thuan Pham, Marcel B\u00f6hme, Andrew Santosa and Alexandru Razvan Caciulescu\ndiscovered that WavPack incorrectly handled certain .wav files. An\nattacker could possibly use this to execute arbitrary code or cause a\ndenial of service. (CVE-2018-10536, CVE-2018-10537)\n\nThuan Pham, Marcel B\u00f6hme, Andrew Santosa and Alexandru Razvan Caciulescu\ndiscovered that WavPack incorrectly handled certain .wav files. An\nattacker could possibly use this to cause a denial of service.\n(CVE-2018-10538, CVE-2018-10539, CVE-2018-10540)\n",
|
|
"aliases": [],
|
|
"upstream": [
|
|
"UBUNTU-CVE-2018-10536",
|
|
"UBUNTU-CVE-2018-10537",
|
|
"UBUNTU-CVE-2018-10538",
|
|
"UBUNTU-CVE-2018-10539",
|
|
"UBUNTU-CVE-2018-10540"
|
|
],
|
|
"related": [],
|
|
"published": "2018-04-30T20:09:25Z",
|
|
"modified": "2026-04-22T07:36:35Z",
|
|
"affected": [
|
|
{
|
|
"package": {
|
|
"ecosystem": "Ubuntu:18.04:LTS",
|
|
"name": "wavpack",
|
|
"purl": "pkg:deb/ubuntu/wavpack@5.1.0-2ubuntu1.1?arch=source&distro=bionic"
|
|
},
|
|
"ranges": [
|
|
{
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": "5.1.0-2ubuntu1.1"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"versions": [
|
|
"5.1.0-2",
|
|
"5.1.0-2ubuntu1"
|
|
],
|
|
"ecosystem_specific": {
|
|
"binaries": [
|
|
{
|
|
"binary_name": "libwavpack1",
|
|
"binary_version": "5.1.0-2ubuntu1.1"
|
|
},
|
|
{
|
|
"binary_name": "wavpack",
|
|
"binary_version": "5.1.0-2ubuntu1.1"
|
|
}
|
|
],
|
|
"availability": "No subscription required"
|
|
},
|
|
"database_specific": {
|
|
"cves_map": {
|
|
"ecosystem": "Ubuntu:18.04:LTS",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2018-10536",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "CVE-2018-10537",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "CVE-2018-10538",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "CVE-2018-10539",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "CVE-2018-10540",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": "https://ubuntu.com/security/notices/USN-3637-1"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2018-10536"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2018-10537"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2018-10538"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2018-10539"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2018-10540"
|
|
}
|
|
]
|
|
} |