CVE-2018-17095 - CVE House
Back to Database
Status published High CVE-2018-17095

An issue has been discovered in mpruett Audio File Library...

Vulnerability Description

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17095

Credits & Attribution

No credits recorded in the NVD database.

References

More from audiofile

View All →
CVE-2022-24599
In autofile Audio File Library 0.3.6, there exists one memory...
Medium 6.5
CVE-2020-18781
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile...
Medium 5.5
CVE-2019-13147
In Audio File Library (aka audiofile) 0.3.6, there exists one...
Medium 6.5
CVE-2018-13440
The audiofile Audio File Library 0.3.6 has a NULL pointer...
Medium 6.5
CVE-2017-6839
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile)...
Medium 5.5

Affected Vendor

Affected Software

audiofile, ubuntu linux
Vulnerable Versions:
0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 14.04

Timeline

Official Publish: September 16th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.