Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia: 2019-0230 Security Advisory on WavPack Denial of Service

mageia
Calendar Grey August 31, 2019
Dist Mageia Esm H88
Mageia advisory MGASA-2020-0456 outlines an update for the flac package to rectify vulnerabilities and mitigate possible risks.
Updated wavpack packages fixes security vulnerabilities: It was discovered that WavPack incorrectly handled certain DFF files

Summary

Updated wavpack packages fixes security vulnerabilities:
It was discovered that WavPack incorrectly handled certain DFF files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-11498).
Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319).

References

- https://bugs.mageia.org/show_bug.cgi?id=25265

- https://ubuntu.com/security/notices/USN-3960-1

- https://ubuntu.com/security/notices/USN-4062-1

- https://www.cve.org/CVERecord?id=CVE-2019-11498

- https://www.cve.org/CVERecord?id=CVE-2019-1010315

- https://www.cve.org/CVERecord?id=CVE-2019-1010317

- https://www.cve.org/CVERecord?id=CVE-2019-1010318

- https://www.cve.org/CVERecord?id=CVE-2019-1010319

Topics%20covered

Topics Covered

security advisory denial of service package update software fix Mageia wavpack

Resolution

SRPMS

- 6/core/wavpack-5.1.0-1.2.mga6

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 31 Aug 2019
URL: https://advisories.mageia.org/MGASA-2019-0230.html
Type: security
CVE: CVE-2019-11498, CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319

Topics%20covered

Topics Covered

security advisory denial of service package update software fix Mageia wavpack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here