Summary
[5.1.0-15]
- fix Out-of-bounds read in WavpackVerifySingleBlock function (#1663151)
- CVE-2018-19841
[5.1.0-14]
- fix uninitialized variable in ParseCaffHeaderConfig (#1741251)
- CVE-2019-1010317
[5.1.0-13]
- fortify parsing of .dff files (#1707428, #1733627)
- CVE-2019-1010315
- CVE-2019-11498
[5.1.0-12]
- fix possible infinite loop in WavpackPackInit function (#1663154)
- CVE-2018-19840
[5.1.0-11]
- Fix issues with gating
[5.1.0-10]
- fix uninitialized variable in ParseWave64HeaderConfig (#1741200)
- CVE-2019-1010319
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | wavpack | 0:5.1.0-15.el8 |
| Oracle Linux · 8 | wavpack-devel | 0:5.1.0-15.el8 |
Vulnerabilities 6
-
Unscored —
The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denia…
-
Unscored —
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to caus…
-
Unscored —
WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash…
-
Unscored —
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…
-
Unscored —
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…
-
Unscored —
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depe…