Summary
Hanno Böck discovered that WavPack incorrectly handled certain
WV files. An attacker could possibly use this to cause a denial
of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu
16.04 LTS. (CVE-2016-10169)
Joonun Jang discovered that WavPack incorrectly handled certain
RF64 files. An attacker could possibly use this to cause a denial
of service. This issue only affected Ubuntu 17.10. (CVE-2018-6767)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | wavpack | 4.70.0-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | wavpack | 4.75.2-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (ou…