Summary
It was discovered that SoundTouch incorrectly handled certain WAV files. A
remote attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 ESM. (CVE-2017-9258, CVE-2017-9259,
CVE-2017-9260)
It was discovered that SoundTouch incorrectly handled ccertain WAV files. A
remote attacker could possibly use this issue to cause arbitrary code
execution. (CVE-2018-1000223)
It was discovered that SoundTouch incorrectly handled certain inputs. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2018-17096)
It was discovered that SoundTouch incorrectly handled certain WAV files. A
remote attacker could possibly use this issue to cause a denial of service
or other unspecified impact. (CVE-2018-17097, CVE-2018-17098)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | soundtouch | 1.7.1-5ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | soundtouch | 1.9.2-2+deb9u1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | soundtouch | 1.9.2-3ubuntu0.1~esm1 |
Vulnerabilities 7
-
Unscored —CVE-2017-9258 Public exploit
The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers t…
-
Unscored —CVE-2017-9259 Public exploit
The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote att…
-
Unscored —CVE-2017-9260 Public exploit
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attac…
-
Unscored —
soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavIn…
-
Unscored —
The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to ca…
-
Unscored —
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of ser…
-
Unscored —
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of ser…
References
-
report
https://ubuntu.com/security/CVE-2017-9258
-
report
https://ubuntu.com/security/CVE-2017-9259
-
report
https://ubuntu.com/security/CVE-2017-9260
-
report
https://ubuntu.com/security/CVE-2018-17096
-
report
https://ubuntu.com/security/CVE-2018-17097
-
report
https://ubuntu.com/security/CVE-2018-17098
-
report
https://ubuntu.com/security/CVE-2018-1000223