CVE-2017-11720
lame: Multiple vulnerabilities
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media), Red Hat (baja).
Descripción
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | lame | 3.99.5-r6 |
| alpine 3.11 | lame | 3.99.5-r6 |
| alpine 3.12 | lame | 3.99.5-r6 |
| alpine 3.13 | lame | 3.99.5-r6 |
| alpine 3.14 | lame | 3.99.5-r6 |
| alpine 3.15 | lame | 3.99.5-r6 |
| alpine 3.16 | lame | 3.99.5-r6 |
| alpine 3.17 | lame | 3.99.5-r6 |
| alpine 3.18 | lame | 3.99.5-r6 |
| alpine 3.19 | lame | 3.99.5-r6 |
| alpine 3.20 | lame | 3.99.5-r6 |
| alpine 3.21 | lame | 3.99.5-r6 |
Mostrar las 35 entradas de 32 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | lame | 3.99.5-r6 |
| alpine 3.11 | lame | 3.99.5-r6 |
| alpine 3.12 | lame | 3.99.5-r6 |
| alpine 3.13 | lame | 3.99.5-r6 |
| alpine 3.14 | lame | 3.99.5-r6 |
| alpine 3.15 | lame | 3.99.5-r6 |
| alpine 3.16 | lame | 3.99.5-r6 |
| alpine 3.17 | lame | 3.99.5-r6 |
| alpine 3.18 | lame | 3.99.5-r6 |
| alpine 3.19 | lame | 3.99.5-r6 |
| alpine 3.20 | lame | 3.99.5-r6 |
| alpine 3.21 | lame | 3.99.5-r6 |
| alpine 3.22 | lame | 3.99.5-r6 |
| alpine 3.23 | lame | 3.99.5-r6 |
| alpine 3.24 | lame | 3.99.5-r6 |
| alpine 3.3 | lame | 3.99.5-r6 |
| alpine 3.4 | lame | 3.99.5-r6 |
| alpine 3.5 | lame | 3.99.5-r6 |
| alpine 3.6 | lame | 3.99.5-r6 |
| alpine 3.7 | lame | 3.99.5-r6 |
| alpine 3.8 | lame | 3.99.5-r6 |
| alpine 3.9 | lame | 3.99.5-r6 |
| alpine edge | lame | 3.99.5-r6 |
| debian 11 | lame | 3.99.5+repack1-6 |
| debian 12 | lame | 3.99.5+repack1-6 |
| debian 13 | lame | 3.99.5+repack1-6 |
| debian 14 | lame | 3.99.5+repack1-6 |
| debian 7 | lame | 3.99.5+repack1-3+deb7u1 |
| echo | lame | 3.99.5+repack1-6 |
| rapidfort alma 9 | lame | sin corrección indicada |
| rapidfort alma 9 | lame-libs | sin corrección indicada |
| Red Hat | lame | sin corrección indicada |
| Red Hat | lame-devel | sin corrección indicada |
| Red Hat | lame-libs | sin corrección indicada |
| ubuntu 14.04-ESM | lame | 3.99.5+repack1-3ubuntu1+esm2 |
Referencias
- https://access.redhat.com/security/cve/CVE-2017-11720
- https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
- https://bugs.debian.org/777159
- https://nvd.nist.gov/vuln/detail/CVE-2017-11720
- https://sourceforge.net/p/lame/bugs/460/
- https://ubuntu.com/security/notices/USN-4780-1
- https://www.cve.org/CVERecord?id=CVE-2017-11720