USN-4062-1 — wavpack vulnerabilities

Summary

Rohan Padhye discovered that WavPack incorrectly handled certain WAV files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319)

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	wavpack	5.1.0-2ubuntu1.4

Vulnerabilities 4

Unscored —

CVE-2019-1010315

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash…

WavPack WavPack wavpack wavpack Debian Ubuntu Alpine

Jul 11, 2019
Unscored —

CVE-2019-1010317

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…

WavPack WavPack wavpack wavpack Debian Ubuntu Alpine

Jul 11, 2019
Unscored —

CVE-2019-1010318 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-…

wavpack Ubuntu

Jul 11, 2019
Unscored —

CVE-2019-1010319

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…

WavPack WavPack wavpack wavpack Debian Ubuntu Alpine

Jul 11, 2019

References

report
https://ubuntu.com/security/CVE-2019-1010315
report
https://ubuntu.com/security/CVE-2019-1010317
report
https://ubuntu.com/security/CVE-2019-1010318
report
https://ubuntu.com/security/CVE-2019-1010319

wavpack vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 4

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash…

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-…

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flo…

References