Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS12Y3d4LThtcWgtMjU1N84AAX_H

Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.

Permalink: https://github.com/advisories/GHSA-vcwx-8mqh-2557
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12Y3d4LThtcWgtMjU1N84AAX_H
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: 20 days ago

CVSS Score: 5.5
CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Percentage: 0.00056
EPSS Percentile: 0.24519

Identifiers: GHSA-vcwx-8mqh-2557, CVE-2017-17054
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-17054
• https://github.com/aubio/aubio/issues/148
• https://github.com/aubio/aubio/commit/25ecb7338cebc5b8c79092347839c78349ec33f1
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883355
• https://github.com/pypa/advisory-database/tree/main/vulns/aubio/PYSEC-2017-75.yaml
• https://github.com/advisories/GHSA-vcwx-8mqh-2557

Repository: https://github.com/aubio/aubio
Blast Radius: 10.4

Affected Packages