Summary
It was discovered that WavPack incorrectly handled certain WAV files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-19840, CVE-2018-19841)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | wavpack | 4.70.0-1ubuntu0.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | wavpack | 4.75.2-2ubuntu0.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | wavpack | 5.1.0-2ubuntu1.2 |
Vulnerabilities 2
-
Unscored —
The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denia…
-
Unscored —
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to caus…