Stay Secure with the Latest Linux Advisories

security advisorydenial of servicememory corruption

Mageia 6: MGASA-2019-0078 Moderate: Libmad Memory Corruption

The mad_decoder_run function in decoder.c in libmad 0.15.1b allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file (CVE-2017-11552). The mad_decoder_run() function in decoder.c in Underbit libmad through . MGASA-2019-0078 - Updated mad packages fix security vulnerability Publication date: 14 Feb 2019 URL: https://advisories.mageia.org/MGASA-2019-0078.html Type: security Affected Mageia releases: 6 CVE: CVE-2017-11552, CVE-2018-7263 The mad_decoder_run function in decoder.c in libmad 0.15.1b allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file (CVE-2017-11552). The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file (CVE-2018-7263). References: - https://bugs.mageia.org/show_bug.cgi?id=23698 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/CCLUAGAEWOQKRY2C6HLTXT5WWTWSTNIP/ - https://www.cve.org/CVERecord?id=CVE-2017-11552 - https://www.cve.org/CVERecord?id=CVE-2018-7263 SRPMS: - 6/core/mad-0.15.1b-22.2.mga6 . MGASA-2019-0078 - Updated mad packages fix security vulnerability Publication date: 14 Feb 2019 URL:. mad_decoder_run, function, decoder, libmad, allows, remote, attackers, cause, denia. . LinuxSecurity.com Team

Feb 14, 2019 Mageia